./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0d6ad3f0294acf0e7c3fc00758f9075ea20494f3 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0d6ad3f0294acf0e7c3fc00758f9075ea20494f3 .......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 09:39:18,001 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 09:39:18,003 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 09:39:18,011 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 09:39:18,011 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 09:39:18,012 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 09:39:18,012 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 09:39:18,013 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 09:39:18,014 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 09:39:18,015 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 09:39:18,016 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 09:39:18,016 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 09:39:18,016 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 09:39:18,017 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 09:39:18,018 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 09:39:18,018 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 09:39:18,019 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 09:39:18,020 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 09:39:18,021 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 09:39:18,023 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 09:39:18,023 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 09:39:18,024 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 09:39:18,026 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 09:39:18,026 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 09:39:18,026 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 09:39:18,027 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 09:39:18,027 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 09:39:18,028 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 09:39:18,029 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 09:39:18,029 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 09:39:18,029 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 09:39:18,030 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 09:39:18,030 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 09:39:18,030 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 09:39:18,030 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 09:39:18,031 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 09:39:18,031 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-23 09:39:18,038 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 09:39:18,038 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 09:39:18,038 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 09:39:18,039 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 09:39:18,039 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 09:39:18,039 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 09:39:18,039 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 09:39:18,039 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 09:39:18,040 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 09:39:18,040 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 09:39:18,040 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 09:39:18,040 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 09:39:18,040 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 09:39:18,040 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 09:39:18,040 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 09:39:18,041 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 09:39:18,041 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 09:39:18,041 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 09:39:18,041 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 09:39:18,041 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 09:39:18,041 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 09:39:18,041 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 09:39:18,041 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 09:39:18,042 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 09:39:18,042 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 09:39:18,042 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 09:39:18,042 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 09:39:18,042 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 09:39:18,042 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 09:39:18,042 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 09:39:18,043 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0d6ad3f0294acf0e7c3fc00758f9075ea20494f3 [2018-11-23 09:39:18,066 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 09:39:18,075 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 09:39:18,078 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 09:39:18,079 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 09:39:18,079 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 09:39:18,080 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/../../sv-benchmarks/c/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-23 09:39:18,121 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/data/d6e2616e7/ffb9eef04c7c45ab9471774fb3988e5c/FLAG81fcae296 [2018-11-23 09:39:18,598 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 09:39:18,599 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/sv-benchmarks/c/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-23 09:39:18,612 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/data/d6e2616e7/ffb9eef04c7c45ab9471774fb3988e5c/FLAG81fcae296 [2018-11-23 09:39:19,096 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/data/d6e2616e7/ffb9eef04c7c45ab9471774fb3988e5c [2018-11-23 09:39:19,099 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 09:39:19,100 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 09:39:19,100 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 09:39:19,101 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 09:39:19,103 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 09:39:19,104 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:39:19" (1/1) ... [2018-11-23 09:39:19,105 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4a86c399 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19, skipping insertion in model container [2018-11-23 09:39:19,105 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:39:19" (1/1) ... [2018-11-23 09:39:19,111 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 09:39:19,154 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 09:39:19,490 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 09:39:19,500 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 09:39:19,577 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 09:39:19,594 INFO L195 MainTranslator]: Completed translation [2018-11-23 09:39:19,594 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19 WrapperNode [2018-11-23 09:39:19,594 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 09:39:19,595 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 09:39:19,595 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 09:39:19,595 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 09:39:19,602 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19" (1/1) ... [2018-11-23 09:39:19,619 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19" (1/1) ... [2018-11-23 09:39:19,627 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 09:39:19,627 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 09:39:19,628 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 09:39:19,628 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 09:39:19,635 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19" (1/1) ... [2018-11-23 09:39:19,635 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19" (1/1) ... [2018-11-23 09:39:19,641 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19" (1/1) ... [2018-11-23 09:39:19,642 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19" (1/1) ... [2018-11-23 09:39:19,677 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19" (1/1) ... [2018-11-23 09:39:19,684 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19" (1/1) ... [2018-11-23 09:39:19,687 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19" (1/1) ... [2018-11-23 09:39:19,691 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 09:39:19,691 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 09:39:19,691 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 09:39:19,691 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 09:39:19,692 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 09:39:19,736 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 09:39:19,736 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 09:39:19,736 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 09:39:19,736 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 09:39:19,736 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 09:39:19,736 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 09:39:19,736 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 09:39:19,736 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 09:39:19,737 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 09:39:19,737 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 09:39:19,737 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 09:39:19,737 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 09:39:19,737 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 09:39:19,737 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 09:39:19,737 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 09:39:19,954 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 09:39:19,955 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 09:39:20,415 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 09:39:20,415 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 09:39:20,416 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:39:20 BoogieIcfgContainer [2018-11-23 09:39:20,416 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 09:39:20,417 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 09:39:20,417 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 09:39:20,420 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 09:39:20,420 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 09:39:19" (1/3) ... [2018-11-23 09:39:20,421 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44b74d7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:39:20, skipping insertion in model container [2018-11-23 09:39:20,421 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:39:19" (2/3) ... [2018-11-23 09:39:20,421 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44b74d7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:39:20, skipping insertion in model container [2018-11-23 09:39:20,421 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:39:20" (3/3) ... [2018-11-23 09:39:20,423 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-23 09:39:20,429 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 09:39:20,434 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 09:39:20,444 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 09:39:20,467 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 09:39:20,468 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 09:39:20,468 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 09:39:20,468 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 09:39:20,468 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 09:39:20,468 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 09:39:20,468 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 09:39:20,468 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 09:39:20,468 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 09:39:20,481 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states. [2018-11-23 09:39:20,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2018-11-23 09:39:20,487 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:20,487 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:20,489 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:20,492 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:20,492 INFO L82 PathProgramCache]: Analyzing trace with hash -995657757, now seen corresponding path program 1 times [2018-11-23 09:39:20,493 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:20,494 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:20,526 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:20,526 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:20,526 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:20,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:20,731 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:20,733 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:20,733 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:20,735 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:20,743 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:20,743 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:20,745 INFO L87 Difference]: Start difference. First operand 157 states. Second operand 4 states. [2018-11-23 09:39:21,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:21,058 INFO L93 Difference]: Finished difference Result 333 states and 558 transitions. [2018-11-23 09:39:21,058 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:21,059 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 41 [2018-11-23 09:39:21,060 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:21,067 INFO L225 Difference]: With dead ends: 333 [2018-11-23 09:39:21,067 INFO L226 Difference]: Without dead ends: 169 [2018-11-23 09:39:21,070 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:21,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2018-11-23 09:39:21,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 152. [2018-11-23 09:39:21,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 152 states. [2018-11-23 09:39:21,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 232 transitions. [2018-11-23 09:39:21,105 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 232 transitions. Word has length 41 [2018-11-23 09:39:21,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:21,107 INFO L480 AbstractCegarLoop]: Abstraction has 152 states and 232 transitions. [2018-11-23 09:39:21,107 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:21,107 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 232 transitions. [2018-11-23 09:39:21,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 09:39:21,109 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:21,109 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:21,109 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:21,109 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:21,109 INFO L82 PathProgramCache]: Analyzing trace with hash -1978591950, now seen corresponding path program 1 times [2018-11-23 09:39:21,109 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:21,110 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:21,111 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:21,111 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:21,111 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:21,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:21,219 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:21,219 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:21,219 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:21,220 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:21,221 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:21,221 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:21,221 INFO L87 Difference]: Start difference. First operand 152 states and 232 transitions. Second operand 4 states. [2018-11-23 09:39:21,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:21,407 INFO L93 Difference]: Finished difference Result 296 states and 449 transitions. [2018-11-23 09:39:21,408 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:21,408 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 54 [2018-11-23 09:39:21,408 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:21,409 INFO L225 Difference]: With dead ends: 296 [2018-11-23 09:39:21,409 INFO L226 Difference]: Without dead ends: 169 [2018-11-23 09:39:21,410 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:21,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2018-11-23 09:39:21,417 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 152. [2018-11-23 09:39:21,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 152 states. [2018-11-23 09:39:21,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 231 transitions. [2018-11-23 09:39:21,418 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 231 transitions. Word has length 54 [2018-11-23 09:39:21,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:21,418 INFO L480 AbstractCegarLoop]: Abstraction has 152 states and 231 transitions. [2018-11-23 09:39:21,418 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:21,419 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 231 transitions. [2018-11-23 09:39:21,419 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 09:39:21,419 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:21,419 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:21,420 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:21,420 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:21,420 INFO L82 PathProgramCache]: Analyzing trace with hash -659098542, now seen corresponding path program 1 times [2018-11-23 09:39:21,420 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:21,420 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:21,421 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:21,421 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:21,421 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:21,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:21,503 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:21,503 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:21,503 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 09:39:21,503 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 09:39:21,504 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 09:39:21,504 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:21,504 INFO L87 Difference]: Start difference. First operand 152 states and 231 transitions. Second operand 5 states. [2018-11-23 09:39:21,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:21,876 INFO L93 Difference]: Finished difference Result 300 states and 457 transitions. [2018-11-23 09:39:21,876 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 09:39:21,876 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 55 [2018-11-23 09:39:21,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:21,877 INFO L225 Difference]: With dead ends: 300 [2018-11-23 09:39:21,877 INFO L226 Difference]: Without dead ends: 173 [2018-11-23 09:39:21,878 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-23 09:39:21,878 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2018-11-23 09:39:21,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 172. [2018-11-23 09:39:21,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 09:39:21,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 257 transitions. [2018-11-23 09:39:21,887 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 257 transitions. Word has length 55 [2018-11-23 09:39:21,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:21,888 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 257 transitions. [2018-11-23 09:39:21,888 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 09:39:21,888 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 257 transitions. [2018-11-23 09:39:21,889 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 09:39:21,889 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:21,889 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:21,889 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:21,889 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:21,889 INFO L82 PathProgramCache]: Analyzing trace with hash 1162543817, now seen corresponding path program 1 times [2018-11-23 09:39:21,889 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:21,889 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:21,891 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:21,891 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:21,891 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:21,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:21,958 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:21,959 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:21,959 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:21,959 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:21,959 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:21,959 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:21,960 INFO L87 Difference]: Start difference. First operand 172 states and 257 transitions. Second operand 4 states. [2018-11-23 09:39:22,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:22,120 INFO L93 Difference]: Finished difference Result 333 states and 497 transitions. [2018-11-23 09:39:22,120 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:22,120 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2018-11-23 09:39:22,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:22,121 INFO L225 Difference]: With dead ends: 333 [2018-11-23 09:39:22,122 INFO L226 Difference]: Without dead ends: 186 [2018-11-23 09:39:22,122 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:22,123 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 186 states. [2018-11-23 09:39:22,128 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 186 to 172. [2018-11-23 09:39:22,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 09:39:22,129 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 256 transitions. [2018-11-23 09:39:22,129 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 256 transitions. Word has length 55 [2018-11-23 09:39:22,129 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:22,129 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 256 transitions. [2018-11-23 09:39:22,129 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:22,129 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 256 transitions. [2018-11-23 09:39:22,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 09:39:22,130 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:22,130 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:22,130 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:22,131 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:22,131 INFO L82 PathProgramCache]: Analyzing trace with hash -480987638, now seen corresponding path program 1 times [2018-11-23 09:39:22,131 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:22,131 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:22,132 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:22,132 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:22,132 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:22,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:22,184 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:22,184 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:22,184 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:22,184 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:22,185 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:22,185 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:22,185 INFO L87 Difference]: Start difference. First operand 172 states and 256 transitions. Second operand 4 states. [2018-11-23 09:39:22,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:22,326 INFO L93 Difference]: Finished difference Result 332 states and 495 transitions. [2018-11-23 09:39:22,326 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:22,326 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2018-11-23 09:39:22,326 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:22,327 INFO L225 Difference]: With dead ends: 332 [2018-11-23 09:39:22,327 INFO L226 Difference]: Without dead ends: 185 [2018-11-23 09:39:22,327 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:22,328 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2018-11-23 09:39:22,333 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 172. [2018-11-23 09:39:22,333 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 09:39:22,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 255 transitions. [2018-11-23 09:39:22,334 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 255 transitions. Word has length 55 [2018-11-23 09:39:22,334 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:22,334 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 255 transitions. [2018-11-23 09:39:22,334 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:22,334 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 255 transitions. [2018-11-23 09:39:22,335 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-23 09:39:22,335 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:22,335 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:22,335 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:22,335 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:22,335 INFO L82 PathProgramCache]: Analyzing trace with hash -2014271313, now seen corresponding path program 1 times [2018-11-23 09:39:22,335 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:22,335 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:22,336 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:22,336 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:22,336 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:22,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:22,407 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:22,407 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:22,407 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:22,408 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:22,408 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:22,408 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:22,408 INFO L87 Difference]: Start difference. First operand 172 states and 255 transitions. Second operand 4 states. [2018-11-23 09:39:22,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:22,534 INFO L93 Difference]: Finished difference Result 332 states and 494 transitions. [2018-11-23 09:39:22,534 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:22,534 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 56 [2018-11-23 09:39:22,535 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:22,535 INFO L225 Difference]: With dead ends: 332 [2018-11-23 09:39:22,535 INFO L226 Difference]: Without dead ends: 185 [2018-11-23 09:39:22,536 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:22,536 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2018-11-23 09:39:22,540 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 172. [2018-11-23 09:39:22,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 09:39:22,541 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 254 transitions. [2018-11-23 09:39:22,541 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 254 transitions. Word has length 56 [2018-11-23 09:39:22,541 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:22,541 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 254 transitions. [2018-11-23 09:39:22,542 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:22,542 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 254 transitions. [2018-11-23 09:39:22,542 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 09:39:22,543 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:22,543 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:22,543 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:22,543 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:22,543 INFO L82 PathProgramCache]: Analyzing trace with hash -515871290, now seen corresponding path program 1 times [2018-11-23 09:39:22,543 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:22,543 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:22,544 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:22,544 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:22,544 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:22,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:22,593 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:22,593 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:22,593 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:22,593 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:22,594 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:22,594 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:22,594 INFO L87 Difference]: Start difference. First operand 172 states and 254 transitions. Second operand 4 states. [2018-11-23 09:39:22,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:22,735 INFO L93 Difference]: Finished difference Result 332 states and 493 transitions. [2018-11-23 09:39:22,736 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:22,736 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-23 09:39:22,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:22,737 INFO L225 Difference]: With dead ends: 332 [2018-11-23 09:39:22,737 INFO L226 Difference]: Without dead ends: 185 [2018-11-23 09:39:22,737 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:22,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2018-11-23 09:39:22,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 172. [2018-11-23 09:39:22,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 09:39:22,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 253 transitions. [2018-11-23 09:39:22,741 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 253 transitions. Word has length 57 [2018-11-23 09:39:22,742 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:22,742 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 253 transitions. [2018-11-23 09:39:22,742 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:22,742 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 253 transitions. [2018-11-23 09:39:22,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 09:39:22,742 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:22,743 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:22,743 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:22,743 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:22,743 INFO L82 PathProgramCache]: Analyzing trace with hash -623975095, now seen corresponding path program 1 times [2018-11-23 09:39:22,743 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:22,743 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:22,744 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:22,744 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:22,744 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:22,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:22,779 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:22,779 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:22,779 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:22,780 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:22,780 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:22,780 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:22,780 INFO L87 Difference]: Start difference. First operand 172 states and 253 transitions. Second operand 4 states. [2018-11-23 09:39:22,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:22,974 INFO L93 Difference]: Finished difference Result 361 states and 539 transitions. [2018-11-23 09:39:22,975 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:22,975 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 58 [2018-11-23 09:39:22,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:22,976 INFO L225 Difference]: With dead ends: 361 [2018-11-23 09:39:22,976 INFO L226 Difference]: Without dead ends: 214 [2018-11-23 09:39:22,976 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:22,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 214 states. [2018-11-23 09:39:22,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 214 to 194. [2018-11-23 09:39:22,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 09:39:22,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 290 transitions. [2018-11-23 09:39:22,983 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 290 transitions. Word has length 58 [2018-11-23 09:39:22,983 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:22,983 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 290 transitions. [2018-11-23 09:39:22,983 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:22,983 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 290 transitions. [2018-11-23 09:39:22,984 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 09:39:22,984 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:22,984 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:22,984 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:22,984 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:22,985 INFO L82 PathProgramCache]: Analyzing trace with hash 1702821866, now seen corresponding path program 1 times [2018-11-23 09:39:22,985 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:22,985 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:22,986 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:22,986 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:22,986 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:22,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:23,026 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:23,026 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:23,026 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:23,026 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:23,027 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:23,027 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:23,027 INFO L87 Difference]: Start difference. First operand 194 states and 290 transitions. Second operand 4 states. [2018-11-23 09:39:23,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:23,215 INFO L93 Difference]: Finished difference Result 376 states and 566 transitions. [2018-11-23 09:39:23,216 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:23,216 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 58 [2018-11-23 09:39:23,216 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:23,217 INFO L225 Difference]: With dead ends: 376 [2018-11-23 09:39:23,217 INFO L226 Difference]: Without dead ends: 207 [2018-11-23 09:39:23,218 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:23,218 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2018-11-23 09:39:23,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 194. [2018-11-23 09:39:23,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 09:39:23,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 289 transitions. [2018-11-23 09:39:23,223 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 289 transitions. Word has length 58 [2018-11-23 09:39:23,223 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:23,224 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 289 transitions. [2018-11-23 09:39:23,224 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:23,224 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 289 transitions. [2018-11-23 09:39:23,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2018-11-23 09:39:23,224 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:23,224 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:23,225 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:23,225 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:23,225 INFO L82 PathProgramCache]: Analyzing trace with hash 480798369, now seen corresponding path program 1 times [2018-11-23 09:39:23,225 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:23,225 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:23,226 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:23,226 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:23,226 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:23,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:23,267 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:23,267 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:23,268 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:23,268 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:23,268 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:23,268 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:23,268 INFO L87 Difference]: Start difference. First operand 194 states and 289 transitions. Second operand 4 states. [2018-11-23 09:39:23,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:23,452 INFO L93 Difference]: Finished difference Result 366 states and 553 transitions. [2018-11-23 09:39:23,452 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:23,453 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 59 [2018-11-23 09:39:23,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:23,453 INFO L225 Difference]: With dead ends: 366 [2018-11-23 09:39:23,454 INFO L226 Difference]: Without dead ends: 197 [2018-11-23 09:39:23,454 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:23,454 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2018-11-23 09:39:23,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 194. [2018-11-23 09:39:23,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 09:39:23,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 288 transitions. [2018-11-23 09:39:23,460 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 288 transitions. Word has length 59 [2018-11-23 09:39:23,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:23,460 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 288 transitions. [2018-11-23 09:39:23,460 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:23,460 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 288 transitions. [2018-11-23 09:39:23,461 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2018-11-23 09:39:23,461 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:23,461 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:23,461 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:23,461 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:23,461 INFO L82 PathProgramCache]: Analyzing trace with hash 1484856716, now seen corresponding path program 1 times [2018-11-23 09:39:23,461 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:23,462 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:23,462 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:23,462 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:23,462 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:23,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:23,512 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:23,512 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:23,513 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:23,513 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:23,513 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:23,513 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:23,513 INFO L87 Difference]: Start difference. First operand 194 states and 288 transitions. Second operand 4 states. [2018-11-23 09:39:23,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:23,720 INFO L93 Difference]: Finished difference Result 383 states and 573 transitions. [2018-11-23 09:39:23,721 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:23,721 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 71 [2018-11-23 09:39:23,721 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:23,722 INFO L225 Difference]: With dead ends: 383 [2018-11-23 09:39:23,722 INFO L226 Difference]: Without dead ends: 214 [2018-11-23 09:39:23,722 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:23,723 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 214 states. [2018-11-23 09:39:23,728 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 214 to 194. [2018-11-23 09:39:23,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 09:39:23,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 287 transitions. [2018-11-23 09:39:23,729 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 287 transitions. Word has length 71 [2018-11-23 09:39:23,729 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:23,729 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 287 transitions. [2018-11-23 09:39:23,729 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:23,729 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 287 transitions. [2018-11-23 09:39:23,730 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2018-11-23 09:39:23,730 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:23,730 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:23,730 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:23,730 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:23,730 INFO L82 PathProgramCache]: Analyzing trace with hash 1155270063, now seen corresponding path program 1 times [2018-11-23 09:39:23,730 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:23,731 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:23,731 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:23,731 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:23,731 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:23,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:23,776 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:23,776 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:23,776 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:23,776 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:23,776 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:23,776 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:23,777 INFO L87 Difference]: Start difference. First operand 194 states and 287 transitions. Second operand 4 states. [2018-11-23 09:39:23,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:23,979 INFO L93 Difference]: Finished difference Result 381 states and 569 transitions. [2018-11-23 09:39:23,980 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:23,980 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 72 [2018-11-23 09:39:23,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:23,981 INFO L225 Difference]: With dead ends: 381 [2018-11-23 09:39:23,981 INFO L226 Difference]: Without dead ends: 212 [2018-11-23 09:39:23,982 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:23,983 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 212 states. [2018-11-23 09:39:23,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 212 to 194. [2018-11-23 09:39:23,988 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 09:39:23,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 286 transitions. [2018-11-23 09:39:23,989 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 286 transitions. Word has length 72 [2018-11-23 09:39:23,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:23,989 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 286 transitions. [2018-11-23 09:39:23,989 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:23,989 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 286 transitions. [2018-11-23 09:39:23,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2018-11-23 09:39:23,990 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:23,990 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:23,990 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:23,990 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:23,990 INFO L82 PathProgramCache]: Analyzing trace with hash -488261392, now seen corresponding path program 1 times [2018-11-23 09:39:23,990 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:23,990 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:23,991 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:23,991 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:23,991 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:24,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:24,046 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:24,047 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:24,047 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:24,047 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:24,047 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:24,047 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:24,047 INFO L87 Difference]: Start difference. First operand 194 states and 286 transitions. Second operand 4 states. [2018-11-23 09:39:24,256 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:24,256 INFO L93 Difference]: Finished difference Result 380 states and 566 transitions. [2018-11-23 09:39:24,257 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:24,257 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 72 [2018-11-23 09:39:24,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:24,258 INFO L225 Difference]: With dead ends: 380 [2018-11-23 09:39:24,259 INFO L226 Difference]: Without dead ends: 211 [2018-11-23 09:39:24,259 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:24,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-23 09:39:24,267 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 194. [2018-11-23 09:39:24,267 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 09:39:24,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 285 transitions. [2018-11-23 09:39:24,268 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 285 transitions. Word has length 72 [2018-11-23 09:39:24,268 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:24,268 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 285 transitions. [2018-11-23 09:39:24,268 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:24,268 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 285 transitions. [2018-11-23 09:39:24,269 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2018-11-23 09:39:24,269 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:24,269 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:24,270 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:24,270 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:24,270 INFO L82 PathProgramCache]: Analyzing trace with hash 2055209609, now seen corresponding path program 1 times [2018-11-23 09:39:24,271 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:24,271 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:24,271 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:24,271 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:24,272 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:24,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:24,344 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:24,344 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:24,345 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:24,345 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:24,345 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:24,346 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:24,346 INFO L87 Difference]: Start difference. First operand 194 states and 285 transitions. Second operand 4 states. [2018-11-23 09:39:24,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:24,560 INFO L93 Difference]: Finished difference Result 380 states and 564 transitions. [2018-11-23 09:39:24,561 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:24,561 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 73 [2018-11-23 09:39:24,561 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:24,562 INFO L225 Difference]: With dead ends: 380 [2018-11-23 09:39:24,562 INFO L226 Difference]: Without dead ends: 211 [2018-11-23 09:39:24,563 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:24,563 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-23 09:39:24,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 194. [2018-11-23 09:39:24,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 09:39:24,570 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 284 transitions. [2018-11-23 09:39:24,570 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 284 transitions. Word has length 73 [2018-11-23 09:39:24,570 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:24,571 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 284 transitions. [2018-11-23 09:39:24,571 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:24,571 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 284 transitions. [2018-11-23 09:39:24,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 09:39:24,571 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:24,571 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:24,572 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:24,572 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:24,572 INFO L82 PathProgramCache]: Analyzing trace with hash 1083985708, now seen corresponding path program 1 times [2018-11-23 09:39:24,572 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:24,572 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:24,573 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:24,573 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:24,573 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:24,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:24,646 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:24,646 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:24,646 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:24,646 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:24,647 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:24,647 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:24,647 INFO L87 Difference]: Start difference. First operand 194 states and 284 transitions. Second operand 4 states. [2018-11-23 09:39:24,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:24,838 INFO L93 Difference]: Finished difference Result 380 states and 562 transitions. [2018-11-23 09:39:24,839 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:24,839 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 74 [2018-11-23 09:39:24,839 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:24,840 INFO L225 Difference]: With dead ends: 380 [2018-11-23 09:39:24,840 INFO L226 Difference]: Without dead ends: 211 [2018-11-23 09:39:24,840 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:24,841 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-23 09:39:24,848 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 194. [2018-11-23 09:39:24,848 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 09:39:24,849 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 283 transitions. [2018-11-23 09:39:24,849 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 283 transitions. Word has length 74 [2018-11-23 09:39:24,849 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:24,850 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 283 transitions. [2018-11-23 09:39:24,850 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:24,850 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 283 transitions. [2018-11-23 09:39:24,852 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2018-11-23 09:39:24,852 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:24,852 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:24,852 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:24,852 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:24,852 INFO L82 PathProgramCache]: Analyzing trace with hash -241218748, now seen corresponding path program 1 times [2018-11-23 09:39:24,852 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:24,852 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:24,855 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:24,855 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:24,855 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:24,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:24,897 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:24,897 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:24,897 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:24,897 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:24,898 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:24,898 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:24,898 INFO L87 Difference]: Start difference. First operand 194 states and 283 transitions. Second operand 4 states. [2018-11-23 09:39:25,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:25,096 INFO L93 Difference]: Finished difference Result 380 states and 560 transitions. [2018-11-23 09:39:25,097 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:25,097 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 75 [2018-11-23 09:39:25,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:25,098 INFO L225 Difference]: With dead ends: 380 [2018-11-23 09:39:25,098 INFO L226 Difference]: Without dead ends: 211 [2018-11-23 09:39:25,099 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:25,099 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-23 09:39:25,105 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 194. [2018-11-23 09:39:25,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 09:39:25,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 282 transitions. [2018-11-23 09:39:25,106 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 282 transitions. Word has length 75 [2018-11-23 09:39:25,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:25,106 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 282 transitions. [2018-11-23 09:39:25,106 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:25,106 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 282 transitions. [2018-11-23 09:39:25,107 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2018-11-23 09:39:25,107 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:25,107 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:25,107 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:25,107 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:25,107 INFO L82 PathProgramCache]: Analyzing trace with hash 345081479, now seen corresponding path program 1 times [2018-11-23 09:39:25,108 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:25,108 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:25,108 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:25,108 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:25,108 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:25,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:25,172 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:39:25,173 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:25,173 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:25,173 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:25,173 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:25,173 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:25,173 INFO L87 Difference]: Start difference. First operand 194 states and 282 transitions. Second operand 4 states. [2018-11-23 09:39:25,365 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:25,365 INFO L93 Difference]: Finished difference Result 370 states and 546 transitions. [2018-11-23 09:39:25,365 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:25,366 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 76 [2018-11-23 09:39:25,366 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:25,366 INFO L225 Difference]: With dead ends: 370 [2018-11-23 09:39:25,367 INFO L226 Difference]: Without dead ends: 201 [2018-11-23 09:39:25,367 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:25,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2018-11-23 09:39:25,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 194. [2018-11-23 09:39:25,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 09:39:25,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 281 transitions. [2018-11-23 09:39:25,374 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 281 transitions. Word has length 76 [2018-11-23 09:39:25,374 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:25,374 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 281 transitions. [2018-11-23 09:39:25,376 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:25,376 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 281 transitions. [2018-11-23 09:39:25,376 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2018-11-23 09:39:25,377 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:25,377 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:25,377 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:25,377 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:25,377 INFO L82 PathProgramCache]: Analyzing trace with hash 1440674399, now seen corresponding path program 1 times [2018-11-23 09:39:25,377 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:25,377 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:25,380 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:25,380 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:25,381 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:25,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:25,433 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:25,433 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:25,433 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:25,433 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:25,433 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:25,434 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:25,434 INFO L87 Difference]: Start difference. First operand 194 states and 281 transitions. Second operand 4 states. [2018-11-23 09:39:25,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:25,700 INFO L93 Difference]: Finished difference Result 469 states and 696 transitions. [2018-11-23 09:39:25,701 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:25,701 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 09:39:25,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:25,702 INFO L225 Difference]: With dead ends: 469 [2018-11-23 09:39:25,702 INFO L226 Difference]: Without dead ends: 300 [2018-11-23 09:39:25,702 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:25,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 300 states. [2018-11-23 09:39:25,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 300 to 224. [2018-11-23 09:39:25,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 224 states. [2018-11-23 09:39:25,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 224 states to 224 states and 332 transitions. [2018-11-23 09:39:25,708 INFO L78 Accepts]: Start accepts. Automaton has 224 states and 332 transitions. Word has length 80 [2018-11-23 09:39:25,708 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:25,708 INFO L480 AbstractCegarLoop]: Abstraction has 224 states and 332 transitions. [2018-11-23 09:39:25,708 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:25,708 INFO L276 IsEmpty]: Start isEmpty. Operand 224 states and 332 transitions. [2018-11-23 09:39:25,709 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2018-11-23 09:39:25,709 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:25,709 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:25,709 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:25,710 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:25,710 INFO L82 PathProgramCache]: Analyzing trace with hash 1368287841, now seen corresponding path program 1 times [2018-11-23 09:39:25,710 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:25,710 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:25,710 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:25,711 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:25,711 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:25,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:25,745 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:25,745 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:25,745 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:25,745 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:25,746 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:25,746 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:25,746 INFO L87 Difference]: Start difference. First operand 224 states and 332 transitions. Second operand 4 states. [2018-11-23 09:39:25,927 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:25,927 INFO L93 Difference]: Finished difference Result 472 states and 710 transitions. [2018-11-23 09:39:25,928 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:25,928 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 09:39:25,928 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:25,929 INFO L225 Difference]: With dead ends: 472 [2018-11-23 09:39:25,929 INFO L226 Difference]: Without dead ends: 273 [2018-11-23 09:39:25,929 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:25,930 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 273 states. [2018-11-23 09:39:25,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 273 to 248. [2018-11-23 09:39:25,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 248 states. [2018-11-23 09:39:25,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 373 transitions. [2018-11-23 09:39:25,938 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 373 transitions. Word has length 80 [2018-11-23 09:39:25,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:25,938 INFO L480 AbstractCegarLoop]: Abstraction has 248 states and 373 transitions. [2018-11-23 09:39:25,938 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:25,939 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 373 transitions. [2018-11-23 09:39:25,939 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 09:39:25,939 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:25,939 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:25,940 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:25,940 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:25,940 INFO L82 PathProgramCache]: Analyzing trace with hash -2002550352, now seen corresponding path program 1 times [2018-11-23 09:39:25,940 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:25,940 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:25,941 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:25,941 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:25,941 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:25,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:26,013 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:26,013 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:26,013 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:26,013 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:26,014 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:26,014 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:26,014 INFO L87 Difference]: Start difference. First operand 248 states and 373 transitions. Second operand 4 states. [2018-11-23 09:39:26,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:26,305 INFO L93 Difference]: Finished difference Result 539 states and 815 transitions. [2018-11-23 09:39:26,310 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:26,310 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 09:39:26,311 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:26,311 INFO L225 Difference]: With dead ends: 539 [2018-11-23 09:39:26,311 INFO L226 Difference]: Without dead ends: 316 [2018-11-23 09:39:26,312 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:26,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2018-11-23 09:39:26,318 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 249. [2018-11-23 09:39:26,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 249 states. [2018-11-23 09:39:26,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 249 states to 249 states and 374 transitions. [2018-11-23 09:39:26,319 INFO L78 Accepts]: Start accepts. Automaton has 249 states and 374 transitions. Word has length 81 [2018-11-23 09:39:26,319 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:26,319 INFO L480 AbstractCegarLoop]: Abstraction has 249 states and 374 transitions. [2018-11-23 09:39:26,319 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:26,319 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 374 transitions. [2018-11-23 09:39:26,320 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2018-11-23 09:39:26,320 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:26,320 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:26,320 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:26,320 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:26,321 INFO L82 PathProgramCache]: Analyzing trace with hash 323004382, now seen corresponding path program 1 times [2018-11-23 09:39:26,321 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:26,321 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:26,321 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:26,322 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:26,322 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:26,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:26,363 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:26,363 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:26,363 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:26,363 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:26,363 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:26,364 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:26,364 INFO L87 Difference]: Start difference. First operand 249 states and 374 transitions. Second operand 4 states. [2018-11-23 09:39:26,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:26,592 INFO L93 Difference]: Finished difference Result 540 states and 815 transitions. [2018-11-23 09:39:26,593 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:26,593 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 87 [2018-11-23 09:39:26,594 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:26,595 INFO L225 Difference]: With dead ends: 540 [2018-11-23 09:39:26,595 INFO L226 Difference]: Without dead ends: 316 [2018-11-23 09:39:26,595 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:26,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2018-11-23 09:39:26,604 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 259. [2018-11-23 09:39:26,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 259 states. [2018-11-23 09:39:26,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 393 transitions. [2018-11-23 09:39:26,606 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 393 transitions. Word has length 87 [2018-11-23 09:39:26,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:26,606 INFO L480 AbstractCegarLoop]: Abstraction has 259 states and 393 transitions. [2018-11-23 09:39:26,606 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:26,606 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 393 transitions. [2018-11-23 09:39:26,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2018-11-23 09:39:26,607 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:26,607 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:26,607 INFO L423 AbstractCegarLoop]: === Iteration 22 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:26,607 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:26,607 INFO L82 PathProgramCache]: Analyzing trace with hash 1206018514, now seen corresponding path program 1 times [2018-11-23 09:39:26,607 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:26,607 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:26,608 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:26,608 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:26,608 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:26,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:26,674 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:26,674 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:26,674 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:26,674 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:26,674 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:26,675 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:26,675 INFO L87 Difference]: Start difference. First operand 259 states and 393 transitions. Second operand 4 states. [2018-11-23 09:39:26,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:26,915 INFO L93 Difference]: Finished difference Result 542 states and 822 transitions. [2018-11-23 09:39:26,916 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:26,916 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 88 [2018-11-23 09:39:26,916 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:26,917 INFO L225 Difference]: With dead ends: 542 [2018-11-23 09:39:26,917 INFO L226 Difference]: Without dead ends: 308 [2018-11-23 09:39:26,918 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:26,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2018-11-23 09:39:26,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 260. [2018-11-23 09:39:26,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:26,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 394 transitions. [2018-11-23 09:39:26,927 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 394 transitions. Word has length 88 [2018-11-23 09:39:26,927 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:26,928 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 394 transitions. [2018-11-23 09:39:26,928 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:26,928 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 394 transitions. [2018-11-23 09:39:26,928 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2018-11-23 09:39:26,928 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:26,928 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:26,929 INFO L423 AbstractCegarLoop]: === Iteration 23 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:26,929 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:26,929 INFO L82 PathProgramCache]: Analyzing trace with hash 62751798, now seen corresponding path program 1 times [2018-11-23 09:39:26,929 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:26,929 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:26,930 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:26,930 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:26,930 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:26,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:26,979 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:26,979 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:26,979 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:26,980 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:26,981 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:26,981 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:26,981 INFO L87 Difference]: Start difference. First operand 260 states and 394 transitions. Second operand 4 states. [2018-11-23 09:39:27,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:27,242 INFO L93 Difference]: Finished difference Result 543 states and 822 transitions. [2018-11-23 09:39:27,246 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:27,246 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 93 [2018-11-23 09:39:27,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:27,247 INFO L225 Difference]: With dead ends: 543 [2018-11-23 09:39:27,248 INFO L226 Difference]: Without dead ends: 308 [2018-11-23 09:39:27,248 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:27,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2018-11-23 09:39:27,259 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 260. [2018-11-23 09:39:27,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:27,260 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 393 transitions. [2018-11-23 09:39:27,260 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 393 transitions. Word has length 93 [2018-11-23 09:39:27,260 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:27,260 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 393 transitions. [2018-11-23 09:39:27,260 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:27,260 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 393 transitions. [2018-11-23 09:39:27,261 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2018-11-23 09:39:27,261 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:27,261 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:27,261 INFO L423 AbstractCegarLoop]: === Iteration 24 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:27,261 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:27,262 INFO L82 PathProgramCache]: Analyzing trace with hash 1991024500, now seen corresponding path program 1 times [2018-11-23 09:39:27,262 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:27,262 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:27,263 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:27,263 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:27,263 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:27,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:27,334 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:27,334 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:27,334 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:27,335 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:27,335 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:27,335 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:27,335 INFO L87 Difference]: Start difference. First operand 260 states and 393 transitions. Second operand 4 states. [2018-11-23 09:39:27,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:27,572 INFO L93 Difference]: Finished difference Result 520 states and 790 transitions. [2018-11-23 09:39:27,572 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:27,572 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 93 [2018-11-23 09:39:27,572 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:27,573 INFO L225 Difference]: With dead ends: 520 [2018-11-23 09:39:27,573 INFO L226 Difference]: Without dead ends: 285 [2018-11-23 09:39:27,574 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:27,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 285 states. [2018-11-23 09:39:27,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 285 to 260. [2018-11-23 09:39:27,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:27,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 392 transitions. [2018-11-23 09:39:27,581 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 392 transitions. Word has length 93 [2018-11-23 09:39:27,582 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:27,582 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 392 transitions. [2018-11-23 09:39:27,582 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:27,582 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 392 transitions. [2018-11-23 09:39:27,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2018-11-23 09:39:27,583 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:27,583 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:27,583 INFO L423 AbstractCegarLoop]: === Iteration 25 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:27,583 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:27,583 INFO L82 PathProgramCache]: Analyzing trace with hash 19690565, now seen corresponding path program 1 times [2018-11-23 09:39:27,583 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:27,583 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:27,584 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:27,584 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:27,584 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:27,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:27,622 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:27,623 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:27,623 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:27,623 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:27,623 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:27,623 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:27,624 INFO L87 Difference]: Start difference. First operand 260 states and 392 transitions. Second operand 4 states. [2018-11-23 09:39:27,837 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:27,837 INFO L93 Difference]: Finished difference Result 541 states and 816 transitions. [2018-11-23 09:39:27,838 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:27,838 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 09:39:27,838 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:27,839 INFO L225 Difference]: With dead ends: 541 [2018-11-23 09:39:27,839 INFO L226 Difference]: Without dead ends: 306 [2018-11-23 09:39:27,839 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:27,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 306 states. [2018-11-23 09:39:27,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 306 to 260. [2018-11-23 09:39:27,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:27,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 391 transitions. [2018-11-23 09:39:27,846 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 391 transitions. Word has length 94 [2018-11-23 09:39:27,846 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:27,846 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 391 transitions. [2018-11-23 09:39:27,846 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:27,846 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 391 transitions. [2018-11-23 09:39:27,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2018-11-23 09:39:27,847 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:27,847 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:27,847 INFO L423 AbstractCegarLoop]: === Iteration 26 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:27,847 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:27,847 INFO L82 PathProgramCache]: Analyzing trace with hash -1623840890, now seen corresponding path program 1 times [2018-11-23 09:39:27,847 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:27,847 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:27,848 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:27,848 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:27,848 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:27,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:27,881 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:27,881 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:27,881 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:27,882 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:27,882 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:27,882 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:27,882 INFO L87 Difference]: Start difference. First operand 260 states and 391 transitions. Second operand 4 states. [2018-11-23 09:39:28,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:28,076 INFO L93 Difference]: Finished difference Result 540 states and 813 transitions. [2018-11-23 09:39:28,076 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:28,076 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 09:39:28,077 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:28,077 INFO L225 Difference]: With dead ends: 540 [2018-11-23 09:39:28,077 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 09:39:28,078 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:28,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 09:39:28,084 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 260. [2018-11-23 09:39:28,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:28,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 390 transitions. [2018-11-23 09:39:28,085 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 390 transitions. Word has length 94 [2018-11-23 09:39:28,085 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:28,085 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 390 transitions. [2018-11-23 09:39:28,085 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:28,085 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 390 transitions. [2018-11-23 09:39:28,086 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2018-11-23 09:39:28,086 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:28,086 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:28,086 INFO L423 AbstractCegarLoop]: === Iteration 27 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:28,086 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:28,086 INFO L82 PathProgramCache]: Analyzing trace with hash -333397817, now seen corresponding path program 1 times [2018-11-23 09:39:28,086 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:28,087 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:28,087 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:28,087 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:28,087 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:28,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:28,120 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:28,120 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:28,120 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:28,120 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:28,121 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:28,121 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:28,121 INFO L87 Difference]: Start difference. First operand 260 states and 390 transitions. Second operand 4 states. [2018-11-23 09:39:28,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:28,279 INFO L93 Difference]: Finished difference Result 518 states and 782 transitions. [2018-11-23 09:39:28,280 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:28,280 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 09:39:28,280 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:28,281 INFO L225 Difference]: With dead ends: 518 [2018-11-23 09:39:28,281 INFO L226 Difference]: Without dead ends: 283 [2018-11-23 09:39:28,282 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:28,282 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 283 states. [2018-11-23 09:39:28,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 283 to 260. [2018-11-23 09:39:28,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:28,288 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 389 transitions. [2018-11-23 09:39:28,288 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 389 transitions. Word has length 94 [2018-11-23 09:39:28,289 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:28,289 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 389 transitions. [2018-11-23 09:39:28,289 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:28,289 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 389 transitions. [2018-11-23 09:39:28,289 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2018-11-23 09:39:28,290 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:28,290 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:28,290 INFO L423 AbstractCegarLoop]: === Iteration 28 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:28,290 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:28,290 INFO L82 PathProgramCache]: Analyzing trace with hash -1976929272, now seen corresponding path program 1 times [2018-11-23 09:39:28,290 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:28,290 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:28,291 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:28,291 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:28,291 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:28,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:28,324 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:28,324 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:28,324 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:28,324 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:28,325 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:28,325 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:28,325 INFO L87 Difference]: Start difference. First operand 260 states and 389 transitions. Second operand 4 states. [2018-11-23 09:39:28,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:28,484 INFO L93 Difference]: Finished difference Result 517 states and 779 transitions. [2018-11-23 09:39:28,484 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:28,484 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 09:39:28,485 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:28,485 INFO L225 Difference]: With dead ends: 517 [2018-11-23 09:39:28,485 INFO L226 Difference]: Without dead ends: 282 [2018-11-23 09:39:28,486 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:28,486 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2018-11-23 09:39:28,492 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2018-11-23 09:39:28,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:28,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 388 transitions. [2018-11-23 09:39:28,493 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 388 transitions. Word has length 94 [2018-11-23 09:39:28,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:28,493 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 388 transitions. [2018-11-23 09:39:28,493 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:28,493 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 388 transitions. [2018-11-23 09:39:28,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2018-11-23 09:39:28,494 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:28,494 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:28,494 INFO L423 AbstractCegarLoop]: === Iteration 29 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:28,494 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:28,494 INFO L82 PathProgramCache]: Analyzing trace with hash 1211983539, now seen corresponding path program 1 times [2018-11-23 09:39:28,494 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:28,495 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:28,495 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:28,496 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:28,496 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:28,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:28,523 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:28,523 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:28,523 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:28,523 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:28,524 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:28,524 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:28,524 INFO L87 Difference]: Start difference. First operand 260 states and 388 transitions. Second operand 4 states. [2018-11-23 09:39:28,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:28,724 INFO L93 Difference]: Finished difference Result 540 states and 807 transitions. [2018-11-23 09:39:28,724 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:28,725 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 95 [2018-11-23 09:39:28,725 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:28,726 INFO L225 Difference]: With dead ends: 540 [2018-11-23 09:39:28,726 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 09:39:28,726 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:28,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 09:39:28,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 260. [2018-11-23 09:39:28,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:28,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 387 transitions. [2018-11-23 09:39:28,734 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 387 transitions. Word has length 95 [2018-11-23 09:39:28,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:28,734 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 387 transitions. [2018-11-23 09:39:28,734 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:28,734 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 387 transitions. [2018-11-23 09:39:28,735 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2018-11-23 09:39:28,735 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:28,735 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:28,735 INFO L423 AbstractCegarLoop]: === Iteration 30 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:28,736 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:28,736 INFO L82 PathProgramCache]: Analyzing trace with hash -1143821711, now seen corresponding path program 1 times [2018-11-23 09:39:28,736 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:28,736 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:28,736 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:28,737 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:28,737 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:28,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:28,763 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:28,763 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:28,764 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:28,764 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:28,764 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:28,764 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:28,764 INFO L87 Difference]: Start difference. First operand 260 states and 387 transitions. Second operand 4 states. [2018-11-23 09:39:28,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:28,926 INFO L93 Difference]: Finished difference Result 517 states and 775 transitions. [2018-11-23 09:39:28,926 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:28,926 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 95 [2018-11-23 09:39:28,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:28,927 INFO L225 Difference]: With dead ends: 517 [2018-11-23 09:39:28,927 INFO L226 Difference]: Without dead ends: 282 [2018-11-23 09:39:28,928 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:28,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2018-11-23 09:39:28,934 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2018-11-23 09:39:28,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:28,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 386 transitions. [2018-11-23 09:39:28,935 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 386 transitions. Word has length 95 [2018-11-23 09:39:28,936 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:28,936 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 386 transitions. [2018-11-23 09:39:28,936 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:28,936 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 386 transitions. [2018-11-23 09:39:28,936 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2018-11-23 09:39:28,936 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:28,937 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:28,937 INFO L423 AbstractCegarLoop]: === Iteration 31 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:28,937 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:28,937 INFO L82 PathProgramCache]: Analyzing trace with hash 713781314, now seen corresponding path program 1 times [2018-11-23 09:39:28,937 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:28,937 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:28,938 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:28,938 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:28,938 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:28,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:28,995 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:28,996 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:28,996 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:28,996 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:28,996 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:28,996 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:28,996 INFO L87 Difference]: Start difference. First operand 260 states and 386 transitions. Second operand 4 states. [2018-11-23 09:39:29,213 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:29,213 INFO L93 Difference]: Finished difference Result 540 states and 803 transitions. [2018-11-23 09:39:29,214 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:29,214 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 09:39:29,214 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:29,215 INFO L225 Difference]: With dead ends: 540 [2018-11-23 09:39:29,215 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 09:39:29,216 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:29,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 09:39:29,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 260. [2018-11-23 09:39:29,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:29,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 385 transitions. [2018-11-23 09:39:29,223 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 385 transitions. Word has length 96 [2018-11-23 09:39:29,224 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:29,224 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 385 transitions. [2018-11-23 09:39:29,224 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:29,224 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 385 transitions. [2018-11-23 09:39:29,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2018-11-23 09:39:29,224 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:29,225 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:29,225 INFO L423 AbstractCegarLoop]: === Iteration 32 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:29,225 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:29,225 INFO L82 PathProgramCache]: Analyzing trace with hash 698262596, now seen corresponding path program 1 times [2018-11-23 09:39:29,225 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:29,225 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:29,226 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:29,226 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:29,226 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:29,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:29,261 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:29,261 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:29,261 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:29,261 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:29,261 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:29,262 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:29,262 INFO L87 Difference]: Start difference. First operand 260 states and 385 transitions. Second operand 4 states. [2018-11-23 09:39:29,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:29,437 INFO L93 Difference]: Finished difference Result 517 states and 771 transitions. [2018-11-23 09:39:29,438 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:29,438 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 09:39:29,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:29,438 INFO L225 Difference]: With dead ends: 517 [2018-11-23 09:39:29,438 INFO L226 Difference]: Without dead ends: 282 [2018-11-23 09:39:29,439 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:29,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2018-11-23 09:39:29,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2018-11-23 09:39:29,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:29,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 384 transitions. [2018-11-23 09:39:29,446 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 384 transitions. Word has length 96 [2018-11-23 09:39:29,446 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:29,446 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 384 transitions. [2018-11-23 09:39:29,447 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:29,447 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 384 transitions. [2018-11-23 09:39:29,447 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2018-11-23 09:39:29,447 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:29,447 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:29,448 INFO L423 AbstractCegarLoop]: === Iteration 33 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:29,448 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:29,448 INFO L82 PathProgramCache]: Analyzing trace with hash 1167346926, now seen corresponding path program 1 times [2018-11-23 09:39:29,448 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:29,448 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:29,449 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:29,449 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:29,449 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:29,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:29,481 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:29,481 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:29,481 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:29,481 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:29,481 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:29,481 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:29,482 INFO L87 Difference]: Start difference. First operand 260 states and 384 transitions. Second operand 4 states. [2018-11-23 09:39:29,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:29,669 INFO L93 Difference]: Finished difference Result 540 states and 799 transitions. [2018-11-23 09:39:29,669 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:29,669 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 97 [2018-11-23 09:39:29,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:29,670 INFO L225 Difference]: With dead ends: 540 [2018-11-23 09:39:29,670 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 09:39:29,671 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:29,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 09:39:29,682 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 260. [2018-11-23 09:39:29,682 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:29,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 383 transitions. [2018-11-23 09:39:29,683 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 383 transitions. Word has length 97 [2018-11-23 09:39:29,684 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:29,684 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 383 transitions. [2018-11-23 09:39:29,684 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:29,684 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 383 transitions. [2018-11-23 09:39:29,684 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2018-11-23 09:39:29,684 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:29,685 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:29,685 INFO L423 AbstractCegarLoop]: === Iteration 34 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:29,685 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:29,685 INFO L82 PathProgramCache]: Analyzing trace with hash 686266668, now seen corresponding path program 1 times [2018-11-23 09:39:29,685 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:29,685 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:29,686 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:29,686 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:29,686 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:29,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:29,755 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:29,755 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:29,756 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:29,756 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:29,756 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:29,756 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:29,756 INFO L87 Difference]: Start difference. First operand 260 states and 383 transitions. Second operand 4 states. [2018-11-23 09:39:29,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:29,963 INFO L93 Difference]: Finished difference Result 517 states and 767 transitions. [2018-11-23 09:39:29,963 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:29,963 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 97 [2018-11-23 09:39:29,963 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:29,964 INFO L225 Difference]: With dead ends: 517 [2018-11-23 09:39:29,964 INFO L226 Difference]: Without dead ends: 282 [2018-11-23 09:39:29,964 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:29,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2018-11-23 09:39:29,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2018-11-23 09:39:29,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:29,976 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 382 transitions. [2018-11-23 09:39:29,976 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 382 transitions. Word has length 97 [2018-11-23 09:39:29,976 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:29,976 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 382 transitions. [2018-11-23 09:39:29,976 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:29,977 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 382 transitions. [2018-11-23 09:39:29,977 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2018-11-23 09:39:29,977 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:29,977 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:29,978 INFO L423 AbstractCegarLoop]: === Iteration 35 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:29,978 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:29,978 INFO L82 PathProgramCache]: Analyzing trace with hash 1060944413, now seen corresponding path program 1 times [2018-11-23 09:39:29,978 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:29,978 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:29,979 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:29,979 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:29,979 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:29,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:30,039 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:30,039 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:30,039 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:30,040 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:30,040 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:30,040 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:30,040 INFO L87 Difference]: Start difference. First operand 260 states and 382 transitions. Second operand 4 states. [2018-11-23 09:39:30,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:30,250 INFO L93 Difference]: Finished difference Result 530 states and 783 transitions. [2018-11-23 09:39:30,251 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:30,251 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 98 [2018-11-23 09:39:30,251 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:30,251 INFO L225 Difference]: With dead ends: 530 [2018-11-23 09:39:30,252 INFO L226 Difference]: Without dead ends: 295 [2018-11-23 09:39:30,252 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:30,252 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2018-11-23 09:39:30,262 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 260. [2018-11-23 09:39:30,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:30,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 381 transitions. [2018-11-23 09:39:30,264 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 381 transitions. Word has length 98 [2018-11-23 09:39:30,264 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:30,264 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 381 transitions. [2018-11-23 09:39:30,264 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:30,264 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 381 transitions. [2018-11-23 09:39:30,265 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2018-11-23 09:39:30,265 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:30,265 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:30,265 INFO L423 AbstractCegarLoop]: === Iteration 36 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:30,265 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:30,265 INFO L82 PathProgramCache]: Analyzing trace with hash -967641697, now seen corresponding path program 1 times [2018-11-23 09:39:30,265 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:30,265 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:30,266 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:30,266 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:30,266 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:30,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:30,333 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:30,334 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:30,334 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:30,334 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:30,334 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:30,334 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:30,334 INFO L87 Difference]: Start difference. First operand 260 states and 381 transitions. Second operand 4 states. [2018-11-23 09:39:30,524 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:30,524 INFO L93 Difference]: Finished difference Result 507 states and 751 transitions. [2018-11-23 09:39:30,525 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:30,525 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 98 [2018-11-23 09:39:30,525 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:30,525 INFO L225 Difference]: With dead ends: 507 [2018-11-23 09:39:30,526 INFO L226 Difference]: Without dead ends: 272 [2018-11-23 09:39:30,526 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:30,527 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2018-11-23 09:39:30,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 260. [2018-11-23 09:39:30,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:30,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 380 transitions. [2018-11-23 09:39:30,540 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 380 transitions. Word has length 98 [2018-11-23 09:39:30,541 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:30,541 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 380 transitions. [2018-11-23 09:39:30,541 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:30,541 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 380 transitions. [2018-11-23 09:39:30,541 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2018-11-23 09:39:30,541 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:30,542 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:30,542 INFO L423 AbstractCegarLoop]: === Iteration 37 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:30,542 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:30,542 INFO L82 PathProgramCache]: Analyzing trace with hash -1531434557, now seen corresponding path program 1 times [2018-11-23 09:39:30,542 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:30,542 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:30,543 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:30,543 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:30,543 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:30,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:30,612 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 75 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:39:30,612 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:30,613 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:30,613 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:30,613 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:30,613 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:30,613 INFO L87 Difference]: Start difference. First operand 260 states and 380 transitions. Second operand 4 states. [2018-11-23 09:39:30,859 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:30,859 INFO L93 Difference]: Finished difference Result 530 states and 779 transitions. [2018-11-23 09:39:30,860 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:30,860 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 102 [2018-11-23 09:39:30,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:30,861 INFO L225 Difference]: With dead ends: 530 [2018-11-23 09:39:30,861 INFO L226 Difference]: Without dead ends: 295 [2018-11-23 09:39:30,861 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:30,862 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2018-11-23 09:39:30,870 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 260. [2018-11-23 09:39:30,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 09:39:30,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 379 transitions. [2018-11-23 09:39:30,871 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 379 transitions. Word has length 102 [2018-11-23 09:39:30,871 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:30,871 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 379 transitions. [2018-11-23 09:39:30,871 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:30,871 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 379 transitions. [2018-11-23 09:39:30,872 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2018-11-23 09:39:30,872 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:30,872 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:30,872 INFO L423 AbstractCegarLoop]: === Iteration 38 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:30,872 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:30,872 INFO L82 PathProgramCache]: Analyzing trace with hash -144649147, now seen corresponding path program 1 times [2018-11-23 09:39:30,872 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:30,872 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:30,873 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:30,873 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:30,873 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:30,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:30,902 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 56 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2018-11-23 09:39:30,903 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:30,903 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 09:39:30,903 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 09:39:30,903 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 09:39:30,903 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:39:30,903 INFO L87 Difference]: Start difference. First operand 260 states and 379 transitions. Second operand 3 states. [2018-11-23 09:39:30,945 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:30,945 INFO L93 Difference]: Finished difference Result 728 states and 1080 transitions. [2018-11-23 09:39:30,946 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 09:39:30,946 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 102 [2018-11-23 09:39:30,947 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:30,948 INFO L225 Difference]: With dead ends: 728 [2018-11-23 09:39:30,948 INFO L226 Difference]: Without dead ends: 493 [2018-11-23 09:39:30,948 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:39:30,949 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 493 states. [2018-11-23 09:39:30,961 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 493 to 493. [2018-11-23 09:39:30,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 493 states. [2018-11-23 09:39:30,962 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 493 states to 493 states and 723 transitions. [2018-11-23 09:39:30,962 INFO L78 Accepts]: Start accepts. Automaton has 493 states and 723 transitions. Word has length 102 [2018-11-23 09:39:30,963 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:30,963 INFO L480 AbstractCegarLoop]: Abstraction has 493 states and 723 transitions. [2018-11-23 09:39:30,963 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 09:39:30,963 INFO L276 IsEmpty]: Start isEmpty. Operand 493 states and 723 transitions. [2018-11-23 09:39:30,964 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 09:39:30,964 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:30,964 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:30,964 INFO L423 AbstractCegarLoop]: === Iteration 39 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:30,964 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:30,964 INFO L82 PathProgramCache]: Analyzing trace with hash -282131921, now seen corresponding path program 1 times [2018-11-23 09:39:30,964 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:30,964 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:30,965 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:30,965 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:30,965 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:30,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:30,991 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 09:39:30,991 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:30,992 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 09:39:30,992 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 09:39:30,992 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 09:39:30,992 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:39:30,992 INFO L87 Difference]: Start difference. First operand 493 states and 723 transitions. Second operand 3 states. [2018-11-23 09:39:31,048 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:31,048 INFO L93 Difference]: Finished difference Result 1196 states and 1769 transitions. [2018-11-23 09:39:31,049 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 09:39:31,049 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 104 [2018-11-23 09:39:31,050 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:31,051 INFO L225 Difference]: With dead ends: 1196 [2018-11-23 09:39:31,051 INFO L226 Difference]: Without dead ends: 728 [2018-11-23 09:39:31,052 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:39:31,052 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 728 states. [2018-11-23 09:39:31,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 728 to 726. [2018-11-23 09:39:31,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 726 states. [2018-11-23 09:39:31,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 726 states to 726 states and 1071 transitions. [2018-11-23 09:39:31,073 INFO L78 Accepts]: Start accepts. Automaton has 726 states and 1071 transitions. Word has length 104 [2018-11-23 09:39:31,073 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:31,073 INFO L480 AbstractCegarLoop]: Abstraction has 726 states and 1071 transitions. [2018-11-23 09:39:31,073 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 09:39:31,074 INFO L276 IsEmpty]: Start isEmpty. Operand 726 states and 1071 transitions. [2018-11-23 09:39:31,074 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2018-11-23 09:39:31,075 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:31,075 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:31,075 INFO L423 AbstractCegarLoop]: === Iteration 40 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:31,075 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:31,075 INFO L82 PathProgramCache]: Analyzing trace with hash -125424114, now seen corresponding path program 1 times [2018-11-23 09:39:31,075 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:31,075 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:31,076 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:31,076 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:31,076 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:31,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:31,114 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 09:39:31,114 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:31,114 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 09:39:31,114 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 09:39:31,114 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 09:39:31,114 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:39:31,115 INFO L87 Difference]: Start difference. First operand 726 states and 1071 transitions. Second operand 3 states. [2018-11-23 09:39:31,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:31,173 INFO L93 Difference]: Finished difference Result 1662 states and 2463 transitions. [2018-11-23 09:39:31,174 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 09:39:31,174 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 111 [2018-11-23 09:39:31,174 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:31,176 INFO L225 Difference]: With dead ends: 1662 [2018-11-23 09:39:31,176 INFO L226 Difference]: Without dead ends: 961 [2018-11-23 09:39:31,177 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:39:31,178 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 961 states. [2018-11-23 09:39:31,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 961 to 959. [2018-11-23 09:39:31,203 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 959 states. [2018-11-23 09:39:31,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 959 states to 959 states and 1405 transitions. [2018-11-23 09:39:31,205 INFO L78 Accepts]: Start accepts. Automaton has 959 states and 1405 transitions. Word has length 111 [2018-11-23 09:39:31,205 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:31,205 INFO L480 AbstractCegarLoop]: Abstraction has 959 states and 1405 transitions. [2018-11-23 09:39:31,205 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 09:39:31,205 INFO L276 IsEmpty]: Start isEmpty. Operand 959 states and 1405 transitions. [2018-11-23 09:39:31,208 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2018-11-23 09:39:31,208 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:31,208 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:31,208 INFO L423 AbstractCegarLoop]: === Iteration 41 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:31,208 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:31,208 INFO L82 PathProgramCache]: Analyzing trace with hash -1174112374, now seen corresponding path program 1 times [2018-11-23 09:39:31,209 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:31,209 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:31,209 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:31,209 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:31,209 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:31,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:31,253 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 09:39:31,253 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:31,253 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:31,254 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:31,254 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:31,254 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:31,254 INFO L87 Difference]: Start difference. First operand 959 states and 1405 transitions. Second operand 4 states. [2018-11-23 09:39:31,550 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:31,550 INFO L93 Difference]: Finished difference Result 2303 states and 3401 transitions. [2018-11-23 09:39:31,551 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:31,551 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 128 [2018-11-23 09:39:31,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:31,553 INFO L225 Difference]: With dead ends: 2303 [2018-11-23 09:39:31,553 INFO L226 Difference]: Without dead ends: 1369 [2018-11-23 09:39:31,554 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:31,555 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1369 states. [2018-11-23 09:39:31,603 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1369 to 1115. [2018-11-23 09:39:31,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1115 states. [2018-11-23 09:39:31,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1115 states to 1115 states and 1689 transitions. [2018-11-23 09:39:31,605 INFO L78 Accepts]: Start accepts. Automaton has 1115 states and 1689 transitions. Word has length 128 [2018-11-23 09:39:31,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:31,606 INFO L480 AbstractCegarLoop]: Abstraction has 1115 states and 1689 transitions. [2018-11-23 09:39:31,606 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:31,606 INFO L276 IsEmpty]: Start isEmpty. Operand 1115 states and 1689 transitions. [2018-11-23 09:39:31,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 130 [2018-11-23 09:39:31,607 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:31,607 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:31,608 INFO L423 AbstractCegarLoop]: === Iteration 42 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:31,608 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:31,608 INFO L82 PathProgramCache]: Analyzing trace with hash 2040039334, now seen corresponding path program 1 times [2018-11-23 09:39:31,608 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:31,608 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:31,609 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:31,609 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:31,609 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:31,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:31,683 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 63 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 09:39:31,683 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:31,683 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:39:31,683 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:39:31,683 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:39:31,684 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:39:31,684 INFO L87 Difference]: Start difference. First operand 1115 states and 1689 transitions. Second operand 4 states. [2018-11-23 09:39:31,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:31,944 INFO L93 Difference]: Finished difference Result 2433 states and 3649 transitions. [2018-11-23 09:39:31,944 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:39:31,945 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 129 [2018-11-23 09:39:31,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:31,947 INFO L225 Difference]: With dead ends: 2433 [2018-11-23 09:39:31,947 INFO L226 Difference]: Without dead ends: 1343 [2018-11-23 09:39:31,948 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:39:31,949 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1343 states. [2018-11-23 09:39:31,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1343 to 1075. [2018-11-23 09:39:31,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1075 states. [2018-11-23 09:39:31,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1075 states to 1075 states and 1613 transitions. [2018-11-23 09:39:31,989 INFO L78 Accepts]: Start accepts. Automaton has 1075 states and 1613 transitions. Word has length 129 [2018-11-23 09:39:31,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:31,989 INFO L480 AbstractCegarLoop]: Abstraction has 1075 states and 1613 transitions. [2018-11-23 09:39:31,989 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:39:31,989 INFO L276 IsEmpty]: Start isEmpty. Operand 1075 states and 1613 transitions. [2018-11-23 09:39:31,991 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2018-11-23 09:39:31,991 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:31,991 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:31,991 INFO L423 AbstractCegarLoop]: === Iteration 43 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:31,991 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:31,991 INFO L82 PathProgramCache]: Analyzing trace with hash 2028637021, now seen corresponding path program 1 times [2018-11-23 09:39:31,991 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:31,991 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:31,992 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:31,992 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:31,992 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:32,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:39:32,322 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 68 proven. 0 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2018-11-23 09:39:32,322 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:39:32,322 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 09:39:32,323 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 09:39:32,323 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 09:39:32,323 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 09:39:32,323 INFO L87 Difference]: Start difference. First operand 1075 states and 1613 transitions. Second operand 7 states. [2018-11-23 09:39:33,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:39:33,053 INFO L93 Difference]: Finished difference Result 3503 states and 5230 transitions. [2018-11-23 09:39:33,054 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 09:39:33,054 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 133 [2018-11-23 09:39:33,054 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:39:33,061 INFO L225 Difference]: With dead ends: 3503 [2018-11-23 09:39:33,061 INFO L226 Difference]: Without dead ends: 2453 [2018-11-23 09:39:33,063 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 4 SyntacticMatches, 7 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2018-11-23 09:39:33,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2453 states. [2018-11-23 09:39:33,143 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2453 to 1705. [2018-11-23 09:39:33,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1705 states. [2018-11-23 09:39:33,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1705 states to 1705 states and 2556 transitions. [2018-11-23 09:39:33,145 INFO L78 Accepts]: Start accepts. Automaton has 1705 states and 2556 transitions. Word has length 133 [2018-11-23 09:39:33,145 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:39:33,145 INFO L480 AbstractCegarLoop]: Abstraction has 1705 states and 2556 transitions. [2018-11-23 09:39:33,146 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-23 09:39:33,146 INFO L276 IsEmpty]: Start isEmpty. Operand 1705 states and 2556 transitions. [2018-11-23 09:39:33,147 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2018-11-23 09:39:33,148 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:39:33,148 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:39:33,148 INFO L423 AbstractCegarLoop]: === Iteration 44 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:39:33,148 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:39:33,148 INFO L82 PathProgramCache]: Analyzing trace with hash -1236970977, now seen corresponding path program 1 times [2018-11-23 09:39:33,148 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:39:33,148 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:39:33,149 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:33,149 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:39:33,149 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:39:33,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 09:39:33,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 09:39:33,260 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=24592, |#NULL.offset|=24609, |old(#NULL.base)|=24592, |old(#NULL.offset)|=24609, |old(~#SSLv3_server_data~0.base)|=24588, |old(~#SSLv3_server_data~0.offset)|=24608, |old(~init~0)|=24620, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=24608, ~init~0=24620] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24592, |old(#NULL.offset)|=24609, |old(~#SSLv3_server_data~0.base)|=24588, |old(~#SSLv3_server_data~0.offset)|=24608, |old(~init~0)|=24620, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24592, |old(#NULL.offset)|=24609, |old(~#SSLv3_server_data~0.base)|=24588, |old(~#SSLv3_server_data~0.offset)|=24608, |old(~init~0)|=24620, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] RET #633#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); VAL [main_~s~0.base=24590, main_~s~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |main_#t~malloc3.base|=24590, |main_#t~malloc3.offset|=0, |main_#t~malloc4.base|=24616, |main_#t~malloc4.offset|=0, |main_#t~malloc5.base|=24621, |main_#t~malloc5.offset|=0, |main_#t~malloc6.base|=24579, |main_#t~malloc6.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=0, ssl3_accept_~cb~0.offset=0, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19.base|=2, |ssl3_accept_#t~mem19.offset|=(- 1), |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22.base|=3, |ssl3_accept_#t~mem22.offset|=(- 2), |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8464 == #t~mem32;havoc #t~mem32; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 == ~blastFlag~0;~blastFlag~0 := 1; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24616, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24602, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8496 == #t~mem35;havoc #t~mem35; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 1 == ~blastFlag~0;~blastFlag~0 := 2; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem71|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24616, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24602, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8512 == #t~mem37;havoc #t~mem37; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem72.base|=24616, |ssl3_accept_#t~mem72.offset|=0, |ssl3_accept_#t~mem73.base|=24601, |ssl3_accept_#t~mem73.offset|=0, |ssl3_accept_#t~mem74|=24606, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296);havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem73.base, #t~mem73.offset;havoc #t~mem74;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 2 == ~blastFlag~0;~blastFlag~0 := 6; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24616, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24602, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8528 == #t~mem39;havoc #t~mem39; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, 836 + #t~mem76.offset, 4);call #t~mem78 := read~int(#t~mem77.base, 12 + #t~mem77.offset, 4);~l~0 := #t~mem78;havoc #t~mem77.base, #t~mem77.offset;havoc #t~mem76.base, #t~mem76.offset;havoc #t~mem78;call #t~mem79 := read~int(~s.base, 232 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem79|=24610, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296;havoc #t~mem79;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem80.base, 871 + #t~mem80.offset, 4);havoc #t~mem80.base, #t~mem80.offset; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem83 := read~int(#t~mem82.base, 871 + #t~mem82.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem82.base|=24616, |ssl3_accept_#t~mem82.offset|=0, |ssl3_accept_#t~mem83|=1, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != #t~mem83;havoc #t~mem82.base, #t~mem82.offset;havoc #t~mem83; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647;~ret~0 := #t~nondet92;havoc #t~nondet92; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 6 == ~blastFlag~0;~blastFlag~0 := 7; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(8544, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24616, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24602, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem40|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem41|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8544 == #t~mem41;havoc #t~mem41; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem93|=24580, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem94.base|=24579, |ssl3_accept_#t~mem94.offset|=0, |ssl3_accept_#t~mem95.base|=0, |ssl3_accept_#t~mem95.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem100|=24606, |ssl3_accept_#t~mem98.base|=24616, |ssl3_accept_#t~mem98.offset|=0, |ssl3_accept_#t~mem99.base|=24601, |ssl3_accept_#t~mem99.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 7 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24592, #NULL.offset=24609, old(#NULL.base)=24592, old(#NULL.offset)=24609, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=24608, ~init~0=24620] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24592, old(#NULL.offset)=24609, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24592, old(#NULL.offset)=24609, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24590, #t~malloc3.offset=0, #t~malloc4.base=24616, #t~malloc4.offset=0, #t~malloc5.base=24621, #t~malloc5.offset=0, #t~malloc6.base=24579, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24590, ~s~0.offset=0] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1079-L1728] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1080] havoc ~buf~0.base, ~buf~0.offset; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0.base, ~cb~0.offset; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet17; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0.base, ~cb~0.offset := 0, 0; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19.base=2, #t~mem19.offset=-1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1115-L1119] assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296; [L1115] havoc #t~mem19.base, #t~mem19.offset; [L1116] call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1116] ~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset; [L1116] havoc #t~mem20.base, #t~mem20.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1120] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4); [L1120] call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4); [L1120] havoc #t~mem21; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1121-L1129] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22.base=3, #t~mem22.offset=-2, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130-L1134] assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296); [L1130] havoc #t~mem22.base, #t~mem22.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume 8464 == #t~mem32; [L1163] havoc #t~mem32; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1323] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1325-L1329] assume 0 == ~blastFlag~0; [L1326] ~blastFlag~0 := 1; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1330-L1334] assume !(~ret~0 <= 0); [L1335] ~got_new_session~0 := 1; [L1336] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1337] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume 8496 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1342-L1346] assume 1 == ~blastFlag~0; [L1343] ~blastFlag~0 := 2; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1347-L1351] assume !(~ret~0 <= 0); [L1352] call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem71=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1352-L1356] assume !(0 != #t~mem71); [L1352] havoc #t~mem71; [L1355] call write~int(8512, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1357] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175-L1672] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178-L1671] assume 8512 == #t~mem37; [L1178] havoc #t~mem37; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1361] call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4); [L1361] call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem72.base=24616, #t~mem72.offset=0, #t~mem73.base=24601, #t~mem73.offset=0, #t~mem74=24606, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361-L1375] assume !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296); [L1361] havoc #t~mem72.base, #t~mem72.offset; [L1361] havoc #t~mem73.base, #t~mem73.offset; [L1361] havoc #t~mem74; [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1365-L1369] assume 2 == ~blastFlag~0; [L1366] ~blastFlag~0 := 6; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1370-L1374] assume !(~ret~0 <= 0); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1376] call write~int(8528, ~s.base, 52 + ~s.offset, 4); [L1377] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175-L1672] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178-L1671] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181-L1670] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184-L1669] assume 8528 == #t~mem39; [L1184] havoc #t~mem39; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1381] call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1381] call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, 836 + #t~mem76.offset, 4); [L1381] call #t~mem78 := read~int(#t~mem77.base, 12 + #t~mem77.offset, 4); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem77.base, #t~mem77.offset; [L1381] havoc #t~mem76.base, #t~mem76.offset; [L1381] havoc #t~mem78; [L1382] call #t~mem79 := read~int(~s.base, 232 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem79=24610, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1382-L1386] assume 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296; [L1382] havoc #t~mem79; [L1383] call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1383] call write~int(1, #t~mem80.base, 871 + #t~mem80.offset, 4); [L1383] havoc #t~mem80.base, #t~mem80.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1387] call #t~mem83 := read~int(#t~mem82.base, 871 + #t~mem82.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem82.base=24616, #t~mem82.offset=0, #t~mem83=1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387-L1427] assume 0 != #t~mem83; [L1387] havoc #t~mem82.base, #t~mem82.offset; [L1387] havoc #t~mem83; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1405] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647; [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1406-L1410] assume 6 == ~blastFlag~0; [L1407] ~blastFlag~0 := 7; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1411-L1415] assume !(~ret~0 <= 0); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1428] call write~int(8544, ~s.base, 52 + ~s.offset, 4); [L1429] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175-L1672] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178-L1671] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181-L1670] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184-L1669] assume !(8528 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1187-L1668] assume !(8529 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1190-L1667] assume 8544 == #t~mem41; [L1190] havoc #t~mem41; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433] call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem93=24580, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433-L1475] assume 0 != ~bitwiseAnd(#t~mem93, 1); [L1433] havoc #t~mem93; [L1434] call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1434] call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem94.base=24579, #t~mem94.offset=0, #t~mem95.base=0, #t~mem95.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1434-L1470] assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296); [L1434] havoc #t~mem95.base, #t~mem95.offset; [L1434] havoc #t~mem94.base, #t~mem94.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444] call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1444] call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4); [L1444] call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem100=24606, #t~mem98.base=24616, #t~mem98.offset=0, #t~mem99.base=24601, #t~mem99.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444-L1469] assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296); [L1444] havoc #t~mem98.base, #t~mem98.offset; [L1444] havoc #t~mem100; [L1444] havoc #t~mem99.base, #t~mem99.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1454] call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1454] call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4); [L1454] havoc #t~mem103.base, #t~mem103.offset; [L1455] assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1456-L1460] assume 7 == ~blastFlag~0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1726] assert false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24592, #NULL.offset=24609, old(#NULL.base)=24592, old(#NULL.offset)=24609, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=24608, ~init~0=24620] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24592, old(#NULL.offset)=24609, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24592, old(#NULL.offset)=24609, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24590, #t~malloc3.offset=0, #t~malloc4.base=24616, #t~malloc4.offset=0, #t~malloc5.base=24621, #t~malloc5.offset=0, #t~malloc6.base=24579, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24590, ~s~0.offset=0] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1079-L1728] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1080] havoc ~buf~0.base, ~buf~0.offset; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0.base, ~cb~0.offset; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet17; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0.base, ~cb~0.offset := 0, 0; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19.base=2, #t~mem19.offset=-1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1115-L1119] assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296; [L1115] havoc #t~mem19.base, #t~mem19.offset; [L1116] call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1116] ~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset; [L1116] havoc #t~mem20.base, #t~mem20.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1120] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4); [L1120] call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4); [L1120] havoc #t~mem21; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1121-L1129] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22.base=3, #t~mem22.offset=-2, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130-L1134] assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296); [L1130] havoc #t~mem22.base, #t~mem22.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume 8464 == #t~mem32; [L1163] havoc #t~mem32; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1323] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1325-L1329] assume 0 == ~blastFlag~0; [L1326] ~blastFlag~0 := 1; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1330-L1334] assume !(~ret~0 <= 0); [L1335] ~got_new_session~0 := 1; [L1336] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1337] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume 8496 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1342-L1346] assume 1 == ~blastFlag~0; [L1343] ~blastFlag~0 := 2; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1347-L1351] assume !(~ret~0 <= 0); [L1352] call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem71=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1352-L1356] assume !(0 != #t~mem71); [L1352] havoc #t~mem71; [L1355] call write~int(8512, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1357] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175-L1672] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178-L1671] assume 8512 == #t~mem37; [L1178] havoc #t~mem37; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1361] call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4); [L1361] call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem72.base=24616, #t~mem72.offset=0, #t~mem73.base=24601, #t~mem73.offset=0, #t~mem74=24606, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361-L1375] assume !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296); [L1361] havoc #t~mem72.base, #t~mem72.offset; [L1361] havoc #t~mem73.base, #t~mem73.offset; [L1361] havoc #t~mem74; [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1365-L1369] assume 2 == ~blastFlag~0; [L1366] ~blastFlag~0 := 6; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1370-L1374] assume !(~ret~0 <= 0); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1376] call write~int(8528, ~s.base, 52 + ~s.offset, 4); [L1377] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175-L1672] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178-L1671] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181-L1670] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184-L1669] assume 8528 == #t~mem39; [L1184] havoc #t~mem39; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1381] call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1381] call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, 836 + #t~mem76.offset, 4); [L1381] call #t~mem78 := read~int(#t~mem77.base, 12 + #t~mem77.offset, 4); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem77.base, #t~mem77.offset; [L1381] havoc #t~mem76.base, #t~mem76.offset; [L1381] havoc #t~mem78; [L1382] call #t~mem79 := read~int(~s.base, 232 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem79=24610, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1382-L1386] assume 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296; [L1382] havoc #t~mem79; [L1383] call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1383] call write~int(1, #t~mem80.base, 871 + #t~mem80.offset, 4); [L1383] havoc #t~mem80.base, #t~mem80.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1387] call #t~mem83 := read~int(#t~mem82.base, 871 + #t~mem82.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem82.base=24616, #t~mem82.offset=0, #t~mem83=1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387-L1427] assume 0 != #t~mem83; [L1387] havoc #t~mem82.base, #t~mem82.offset; [L1387] havoc #t~mem83; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1405] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647; [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1406-L1410] assume 6 == ~blastFlag~0; [L1407] ~blastFlag~0 := 7; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1411-L1415] assume !(~ret~0 <= 0); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1428] call write~int(8544, ~s.base, 52 + ~s.offset, 4); [L1429] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175-L1672] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178-L1671] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181-L1670] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184-L1669] assume !(8528 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1187-L1668] assume !(8529 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1190-L1667] assume 8544 == #t~mem41; [L1190] havoc #t~mem41; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433] call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem93=24580, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433-L1475] assume 0 != ~bitwiseAnd(#t~mem93, 1); [L1433] havoc #t~mem93; [L1434] call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1434] call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem94.base=24579, #t~mem94.offset=0, #t~mem95.base=0, #t~mem95.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1434-L1470] assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296); [L1434] havoc #t~mem95.base, #t~mem95.offset; [L1434] havoc #t~mem94.base, #t~mem94.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444] call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1444] call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4); [L1444] call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem100=24606, #t~mem98.base=24616, #t~mem98.offset=0, #t~mem99.base=24601, #t~mem99.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444-L1469] assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296); [L1444] havoc #t~mem98.base, #t~mem98.offset; [L1444] havoc #t~mem100; [L1444] havoc #t~mem99.base, #t~mem99.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1454] call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1454] call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4); [L1454] havoc #t~mem103.base, #t~mem103.offset; [L1455] assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1456-L1460] assume 7 == ~blastFlag~0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1726] assert false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24592, #NULL!offset=24609, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24608, ~init~0=24620] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24590, #t~malloc3!offset=0, #t~malloc4!base=24616, #t~malloc4!offset=0, #t~malloc5!base=24621, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24590, ~s~0!offset=0] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1079-L1728] ~s := #in~s; [L1080] havoc ~buf~0; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1347] COND FALSE !(~ret~0 <= 0) [L1352] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1352-L1356] COND FALSE !(0 != #t~mem71) [L1352] havoc #t~mem71; [L1355] FCALL call write~int(8512, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1357] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND TRUE 8512 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: 836 + #t~mem72!offset }, 4); [L1361] FCALL call #t~mem74 := read~int({ base: #t~mem73!base, offset: 12 + #t~mem73!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem72!base=24616, #t~mem72!offset=0, #t~mem73!base=24601, #t~mem73!offset=0, #t~mem74=24606, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361-L1375] COND FALSE !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296) [L1361] havoc #t~mem72; [L1361] havoc #t~mem73; [L1361] havoc #t~mem74; [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1365] COND TRUE 2 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1370] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1376] FCALL call write~int(8528, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1377] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND TRUE 8528 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: 836 + #t~mem76!offset }, 4); [L1381] FCALL call #t~mem78 := read~int({ base: #t~mem77!base, offset: 12 + #t~mem77!offset }, 4); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem77; [L1381] havoc #t~mem76; [L1381] havoc #t~mem78; [L1382] FCALL call #t~mem79 := read~int({ base: ~s!base, offset: 232 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem79=24610, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1382-L1386] COND TRUE 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296 [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1383] FCALL call write~int(1, { base: #t~mem80!base, offset: 871 + #t~mem80!offset }, 4); [L1383] havoc #t~mem80; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1387] FCALL call #t~mem83 := read~int({ base: #t~mem82!base, offset: 871 + #t~mem82!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=24616, #t~mem82!offset=0, #t~mem83=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387-L1427] COND TRUE 0 != #t~mem83 [L1387] havoc #t~mem82; [L1387] havoc #t~mem83; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1405] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647; [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1406] COND TRUE 6 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1411] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1428] FCALL call write~int(8544, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1429] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1190] COND TRUE 8544 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433] FCALL call #t~mem93 := read~int({ base: ~s!base, offset: 180 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem93=24580, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433-L1475] COND TRUE 0 != ~bitwiseAnd(#t~mem93, 1) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: 148 + #t~mem94!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem94!base=24579, #t~mem94!offset=0, #t~mem95!base=0, #t~mem95!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1434] COND FALSE !(0 != (#t~mem95!base + #t~mem95!offset) % 4294967296) [L1434] havoc #t~mem95; [L1434] havoc #t~mem94; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: 836 + #t~mem98!offset }, 4); [L1444] FCALL call #t~mem100 := read~int({ base: #t~mem99!base, offset: 12 + #t~mem99!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem100=24606, #t~mem98!base=24616, #t~mem98!offset=0, #t~mem99!base=24601, #t~mem99!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444-L1469] COND FALSE !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296) [L1444] havoc #t~mem98; [L1444] havoc #t~mem100; [L1444] havoc #t~mem99; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1454] FCALL call write~int(1, { base: #t~mem103!base, offset: 895 + #t~mem103!offset }, 4); [L1454] havoc #t~mem103; [L1455] assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1456] COND TRUE 7 == ~blastFlag~0 VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1726] assert false; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24592, #NULL!offset=24609, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24608, ~init~0=24620] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24590, #t~malloc3!offset=0, #t~malloc4!base=24616, #t~malloc4!offset=0, #t~malloc5!base=24621, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24590, ~s~0!offset=0] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1079-L1728] ~s := #in~s; [L1080] havoc ~buf~0; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1347] COND FALSE !(~ret~0 <= 0) [L1352] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1352-L1356] COND FALSE !(0 != #t~mem71) [L1352] havoc #t~mem71; [L1355] FCALL call write~int(8512, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1357] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND TRUE 8512 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: 836 + #t~mem72!offset }, 4); [L1361] FCALL call #t~mem74 := read~int({ base: #t~mem73!base, offset: 12 + #t~mem73!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem72!base=24616, #t~mem72!offset=0, #t~mem73!base=24601, #t~mem73!offset=0, #t~mem74=24606, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361-L1375] COND FALSE !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296) [L1361] havoc #t~mem72; [L1361] havoc #t~mem73; [L1361] havoc #t~mem74; [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1365] COND TRUE 2 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1370] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1376] FCALL call write~int(8528, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1377] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND TRUE 8528 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: 836 + #t~mem76!offset }, 4); [L1381] FCALL call #t~mem78 := read~int({ base: #t~mem77!base, offset: 12 + #t~mem77!offset }, 4); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem77; [L1381] havoc #t~mem76; [L1381] havoc #t~mem78; [L1382] FCALL call #t~mem79 := read~int({ base: ~s!base, offset: 232 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem79=24610, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1382-L1386] COND TRUE 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296 [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1383] FCALL call write~int(1, { base: #t~mem80!base, offset: 871 + #t~mem80!offset }, 4); [L1383] havoc #t~mem80; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1387] FCALL call #t~mem83 := read~int({ base: #t~mem82!base, offset: 871 + #t~mem82!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=24616, #t~mem82!offset=0, #t~mem83=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387-L1427] COND TRUE 0 != #t~mem83 [L1387] havoc #t~mem82; [L1387] havoc #t~mem83; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1405] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647; [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1406] COND TRUE 6 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1411] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1428] FCALL call write~int(8544, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1429] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1190] COND TRUE 8544 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433] FCALL call #t~mem93 := read~int({ base: ~s!base, offset: 180 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem93=24580, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433-L1475] COND TRUE 0 != ~bitwiseAnd(#t~mem93, 1) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: 148 + #t~mem94!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem94!base=24579, #t~mem94!offset=0, #t~mem95!base=0, #t~mem95!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1434] COND FALSE !(0 != (#t~mem95!base + #t~mem95!offset) % 4294967296) [L1434] havoc #t~mem95; [L1434] havoc #t~mem94; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: 836 + #t~mem98!offset }, 4); [L1444] FCALL call #t~mem100 := read~int({ base: #t~mem99!base, offset: 12 + #t~mem99!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem100=24606, #t~mem98!base=24616, #t~mem98!offset=0, #t~mem99!base=24601, #t~mem99!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444-L1469] COND FALSE !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296) [L1444] havoc #t~mem98; [L1444] havoc #t~mem100; [L1444] havoc #t~mem99; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1454] FCALL call write~int(1, { base: #t~mem103!base, offset: 895 + #t~mem103!offset }, 4); [L1454] havoc #t~mem103; [L1455] assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1456] COND TRUE 7 == ~blastFlag~0 VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1726] assert false; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24592, #NULL!offset=24609, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24608, ~init~0=24620] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24590, #t~malloc3!offset=0, #t~malloc4!base=24616, #t~malloc4!offset=0, #t~malloc5!base=24621, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24590, ~s~0!offset=0] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1079-L1728] ~s := #in~s; [L1080] havoc ~buf~0; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1347] COND FALSE !(~ret~0 <= 0) [L1352] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1352-L1356] COND FALSE !(0 != #t~mem71) [L1352] havoc #t~mem71; [L1355] FCALL call write~int(8512, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1357] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND TRUE 8512 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: 836 + #t~mem72!offset }, 4); [L1361] FCALL call #t~mem74 := read~int({ base: #t~mem73!base, offset: 12 + #t~mem73!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem72!base=24616, #t~mem72!offset=0, #t~mem73!base=24601, #t~mem73!offset=0, #t~mem74=24606, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361-L1375] COND FALSE !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296) [L1361] havoc #t~mem72; [L1361] havoc #t~mem73; [L1361] havoc #t~mem74; [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1365] COND TRUE 2 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1370] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1376] FCALL call write~int(8528, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1377] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND TRUE 8528 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: 836 + #t~mem76!offset }, 4); [L1381] FCALL call #t~mem78 := read~int({ base: #t~mem77!base, offset: 12 + #t~mem77!offset }, 4); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem77; [L1381] havoc #t~mem76; [L1381] havoc #t~mem78; [L1382] FCALL call #t~mem79 := read~int({ base: ~s!base, offset: 232 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem79=24610, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1382-L1386] COND TRUE 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296 [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1383] FCALL call write~int(1, { base: #t~mem80!base, offset: 871 + #t~mem80!offset }, 4); [L1383] havoc #t~mem80; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1387] FCALL call #t~mem83 := read~int({ base: #t~mem82!base, offset: 871 + #t~mem82!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=24616, #t~mem82!offset=0, #t~mem83=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387-L1427] COND TRUE 0 != #t~mem83 [L1387] havoc #t~mem82; [L1387] havoc #t~mem83; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1405] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647; [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1406] COND TRUE 6 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1411] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1428] FCALL call write~int(8544, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1429] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1190] COND TRUE 8544 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433] FCALL call #t~mem93 := read~int({ base: ~s!base, offset: 180 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem93=24580, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433-L1475] COND TRUE 0 != ~bitwiseAnd(#t~mem93, 1) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: 148 + #t~mem94!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem94!base=24579, #t~mem94!offset=0, #t~mem95!base=0, #t~mem95!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1434] COND FALSE !(0 != (#t~mem95!base + #t~mem95!offset) % 4294967296) [L1434] havoc #t~mem95; [L1434] havoc #t~mem94; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: 836 + #t~mem98!offset }, 4); [L1444] FCALL call #t~mem100 := read~int({ base: #t~mem99!base, offset: 12 + #t~mem99!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem100=24606, #t~mem98!base=24616, #t~mem98!offset=0, #t~mem99!base=24601, #t~mem99!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444-L1469] COND FALSE !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296) [L1444] havoc #t~mem98; [L1444] havoc #t~mem100; [L1444] havoc #t~mem99; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1454] FCALL call write~int(1, { base: #t~mem103!base, offset: 895 + #t~mem103!offset }, 4); [L1454] havoc #t~mem103; [L1455] assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1456] COND TRUE 7 == ~blastFlag~0 VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1726] assert false; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] ----- [2018-11-23 09:39:35,160 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24588 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 09:39:35,160 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24608 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24592, #NULL!offset=24609, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24608, ~init~0=24620] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24590, #t~malloc3!offset=0, #t~malloc4!base=24616, #t~malloc4!offset=0, #t~malloc5!base=24621, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24590, ~s~0!offset=0] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1079-L1728] ~s := #in~s; [L1080] havoc ~buf~0; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1347] COND FALSE !(~ret~0 <= 0) [L1352] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1352-L1356] COND FALSE !(0 != #t~mem71) [L1352] havoc #t~mem71; [L1355] FCALL call write~int(8512, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1357] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND TRUE 8512 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: 836 + #t~mem72!offset }, 4); [L1361] FCALL call #t~mem74 := read~int({ base: #t~mem73!base, offset: 12 + #t~mem73!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem72!base=24616, #t~mem72!offset=0, #t~mem73!base=24601, #t~mem73!offset=0, #t~mem74=24606, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361-L1375] COND FALSE !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296) [L1361] havoc #t~mem72; [L1361] havoc #t~mem73; [L1361] havoc #t~mem74; [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1365] COND TRUE 2 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1370] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1376] FCALL call write~int(8528, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1377] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND TRUE 8528 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: 836 + #t~mem76!offset }, 4); [L1381] FCALL call #t~mem78 := read~int({ base: #t~mem77!base, offset: 12 + #t~mem77!offset }, 4); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem77; [L1381] havoc #t~mem76; [L1381] havoc #t~mem78; [L1382] FCALL call #t~mem79 := read~int({ base: ~s!base, offset: 232 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem79=24610, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1382-L1386] COND TRUE 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296 [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1383] FCALL call write~int(1, { base: #t~mem80!base, offset: 871 + #t~mem80!offset }, 4); [L1383] havoc #t~mem80; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1387] FCALL call #t~mem83 := read~int({ base: #t~mem82!base, offset: 871 + #t~mem82!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=24616, #t~mem82!offset=0, #t~mem83=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387-L1427] COND TRUE 0 != #t~mem83 [L1387] havoc #t~mem82; [L1387] havoc #t~mem83; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1405] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647; [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1406] COND TRUE 6 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1411] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1428] FCALL call write~int(8544, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1429] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1190] COND TRUE 8544 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433] FCALL call #t~mem93 := read~int({ base: ~s!base, offset: 180 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem93=24580, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433-L1475] COND TRUE 0 != ~bitwiseAnd(#t~mem93, 1) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: 148 + #t~mem94!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem94!base=24579, #t~mem94!offset=0, #t~mem95!base=0, #t~mem95!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1434] COND FALSE !(0 != (#t~mem95!base + #t~mem95!offset) % 4294967296) [L1434] havoc #t~mem95; [L1434] havoc #t~mem94; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: 836 + #t~mem98!offset }, 4); [L1444] FCALL call #t~mem100 := read~int({ base: #t~mem99!base, offset: 12 + #t~mem99!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem100=24606, #t~mem98!base=24616, #t~mem98!offset=0, #t~mem99!base=24601, #t~mem99!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444-L1469] COND FALSE !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296) [L1444] havoc #t~mem98; [L1444] havoc #t~mem100; [L1444] havoc #t~mem99; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1454] FCALL call write~int(1, { base: #t~mem103!base, offset: 895 + #t~mem103!offset }, 4); [L1454] havoc #t~mem103; [L1455] assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1456] COND TRUE 7 == ~blastFlag~0 VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1726] assert false; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24620, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24587:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) VAL [init=1, malloc(sizeof(SSL))={24590:0}, malloc(sizeof(SSL_CTX))={24621:0}, malloc(sizeof(SSL_SESSION))={24579:0}, malloc(sizeof(struct ssl3_state_st))={24616:0}, s={24590:0}, SSLv3_server_data={24587:0}] [L1074] CALL ssl3_accept(s) VAL [init=1, s={24590:0}, SSLv3_server_data={24587:0}] [L1080] BUF_MEM *buf ; [L1081] unsigned long l ; [L1082] unsigned long Time ; [L1083] unsigned long tmp ; [L1084] void (*cb)() ; [L1085] long num1 ; [L1086] int ret ; [L1087] int new_state ; [L1088] int state ; [L1089] int skip ; [L1090] int got_new_session ; [L1091] int tmp___1 = __VERIFIER_nondet_int() ; [L1092] int tmp___2 = __VERIFIER_nondet_int() ; [L1093] int tmp___3 = __VERIFIER_nondet_int() ; [L1094] int tmp___4 = __VERIFIER_nondet_int() ; [L1095] int tmp___5 = __VERIFIER_nondet_int() ; [L1096] int tmp___6 = __VERIFIER_nondet_int() ; [L1097] int tmp___7 ; [L1098] long tmp___8 = __VERIFIER_nondet_long() ; [L1099] int tmp___9 = __VERIFIER_nondet_int() ; [L1100] int tmp___10 = __VERIFIER_nondet_int() ; [L1101] int blastFlag ; [L1105] s->state = 8464 [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->info_callback={2:-1}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] EXPR s->cert VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->cert={3:-2}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={2:-1}, blastFlag=1, got_new_session=0, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1347] COND FALSE !(ret <= 0) [L1352] s->hit VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->hit=0, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1352] COND FALSE !(s->hit) [L1355] s->state = 8512 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1357] s->init_num = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND TRUE s->state == 8512 [L1361] EXPR s->s3 [L1361] EXPR (s->s3)->tmp.new_cipher [L1361] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={2:-1}, ((s->s3)->tmp.new_cipher)->algorithms=24606, (s->s3)->tmp.new_cipher={24601:0}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1361] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1364] ret = __VERIFIER_nondet_int() [L1365] COND TRUE blastFlag == 2 [L1366] blastFlag = 6 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1370] COND FALSE !(ret <= 0) VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1376] s->state = 8528 [L1377] s->init_num = 0 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND TRUE s->state == 8528 [L1381] EXPR s->s3 [L1381] EXPR (s->s3)->tmp.new_cipher [L1381] EXPR ((s->s3)->tmp.new_cipher)->algorithms [L1381] l = ((s->s3)->tmp.new_cipher)->algorithms [L1382] EXPR s->options VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, l=24606, ret=1, s={24590:0}, s={24590:0}, s->options=24610, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1382] COND TRUE s->options & 2097152UL [L1383] EXPR s->s3 [L1383] (s->s3)->tmp.use_rsa_tmp = 1 [L1387] EXPR s->s3 [L1387] (s->s3)->tmp.use_rsa_tmp VAL [={2:-1}, (s->s3)->tmp.use_rsa_tmp=1, blastFlag=6, got_new_session=1, init=1, l=24606, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1387] COND TRUE (s->s3)->tmp.use_rsa_tmp [L1405] ret = __VERIFIER_nondet_int() [L1406] COND TRUE blastFlag == 6 [L1407] blastFlag = 7 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1411] COND FALSE !(ret <= 0) VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1428] s->state = 8544 [L1429] s->init_num = 0 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1190] COND TRUE s->state == 8544 [L1433] EXPR s->verify_mode VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->verify_mode=24580, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1433] COND TRUE s->verify_mode & 1 [L1434] EXPR s->session [L1434] EXPR (s->session)->peer VAL [={2:-1}, (s->session)->peer={0:0}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->session={24579:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1434] COND FALSE !((unsigned long )(s->session)->peer != (unsigned long )((void *)0)) [L1444] EXPR s->s3 [L1444] EXPR (s->s3)->tmp.new_cipher [L1444] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={2:-1}, ((s->s3)->tmp.new_cipher)->algorithms=24606, (s->s3)->tmp.new_cipher={24601:0}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1444] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1454] EXPR s->s3 [L1454] (s->s3)->tmp.cert_request = 1 [L1455] ret = __VERIFIER_nondet_int() [L1456] COND TRUE blastFlag == 7 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=0, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1726] __VERIFIER_error() VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=0, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] ----- [2018-11-23 09:39:35,996 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 09:39:35 BoogieIcfgContainer [2018-11-23 09:39:35,996 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 09:39:35,997 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 09:39:35,997 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 09:39:35,997 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 09:39:35,997 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:39:20" (3/4) ... [2018-11-23 09:39:36,000 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 09:39:36,000 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 09:39:36,001 INFO L168 Benchmark]: Toolchain (without parser) took 16901.52 ms. Allocated memory was 1.0 GB in the beginning and 1.4 GB in the end (delta: 392.2 MB). Free memory was 955.5 MB in the beginning and 965.7 MB in the end (delta: -10.2 MB). Peak memory consumption was 381.9 MB. Max. memory is 11.5 GB. [2018-11-23 09:39:36,002 INFO L168 Benchmark]: CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 985.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 09:39:36,002 INFO L168 Benchmark]: CACSL2BoogieTranslator took 494.19 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 110.1 MB). Free memory was 955.5 MB in the beginning and 1.1 GB in the end (delta: -138.8 MB). Peak memory consumption was 43.7 MB. Max. memory is 11.5 GB. [2018-11-23 09:39:36,003 INFO L168 Benchmark]: Boogie Procedure Inliner took 32.30 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 2.7 MB). Peak memory consumption was 2.7 MB. Max. memory is 11.5 GB. [2018-11-23 09:39:36,003 INFO L168 Benchmark]: Boogie Preprocessor took 63.57 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. [2018-11-23 09:39:36,003 INFO L168 Benchmark]: RCFGBuilder took 724.82 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 84.3 MB). Peak memory consumption was 84.3 MB. Max. memory is 11.5 GB. [2018-11-23 09:39:36,004 INFO L168 Benchmark]: TraceAbstraction took 15579.53 ms. Allocated memory was 1.1 GB in the beginning and 1.4 GB in the end (delta: 282.1 MB). Free memory was 1.0 GB in the beginning and 965.7 MB in the end (delta: 36.2 MB). Peak memory consumption was 318.3 MB. Max. memory is 11.5 GB. [2018-11-23 09:39:36,004 INFO L168 Benchmark]: Witness Printer took 3.75 ms. Allocated memory is still 1.4 GB. Free memory is still 965.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 09:39:36,006 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 985.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 494.19 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 110.1 MB). Free memory was 955.5 MB in the beginning and 1.1 GB in the end (delta: -138.8 MB). Peak memory consumption was 43.7 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 32.30 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 2.7 MB). Peak memory consumption was 2.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 63.57 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. * RCFGBuilder took 724.82 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 84.3 MB). Peak memory consumption was 84.3 MB. Max. memory is 11.5 GB. * TraceAbstraction took 15579.53 ms. Allocated memory was 1.1 GB in the beginning and 1.4 GB in the end (delta: 282.1 MB). Free memory was 1.0 GB in the beginning and 965.7 MB in the end (delta: 36.2 MB). Peak memory consumption was 318.3 MB. Max. memory is 11.5 GB. * Witness Printer took 3.75 ms. Allocated memory is still 1.4 GB. Free memory is still 965.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24588 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24608 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 1726]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseAnd at line 1444. Possible FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24620, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24587:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) VAL [init=1, malloc(sizeof(SSL))={24590:0}, malloc(sizeof(SSL_CTX))={24621:0}, malloc(sizeof(SSL_SESSION))={24579:0}, malloc(sizeof(struct ssl3_state_st))={24616:0}, s={24590:0}, SSLv3_server_data={24587:0}] [L1074] CALL ssl3_accept(s) VAL [init=1, s={24590:0}, SSLv3_server_data={24587:0}] [L1080] BUF_MEM *buf ; [L1081] unsigned long l ; [L1082] unsigned long Time ; [L1083] unsigned long tmp ; [L1084] void (*cb)() ; [L1085] long num1 ; [L1086] int ret ; [L1087] int new_state ; [L1088] int state ; [L1089] int skip ; [L1090] int got_new_session ; [L1091] int tmp___1 = __VERIFIER_nondet_int() ; [L1092] int tmp___2 = __VERIFIER_nondet_int() ; [L1093] int tmp___3 = __VERIFIER_nondet_int() ; [L1094] int tmp___4 = __VERIFIER_nondet_int() ; [L1095] int tmp___5 = __VERIFIER_nondet_int() ; [L1096] int tmp___6 = __VERIFIER_nondet_int() ; [L1097] int tmp___7 ; [L1098] long tmp___8 = __VERIFIER_nondet_long() ; [L1099] int tmp___9 = __VERIFIER_nondet_int() ; [L1100] int tmp___10 = __VERIFIER_nondet_int() ; [L1101] int blastFlag ; [L1105] s->state = 8464 [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->info_callback={2:-1}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] EXPR s->cert VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->cert={3:-2}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={2:-1}, blastFlag=1, got_new_session=0, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1347] COND FALSE !(ret <= 0) [L1352] s->hit VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->hit=0, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1352] COND FALSE !(s->hit) [L1355] s->state = 8512 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1357] s->init_num = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND TRUE s->state == 8512 [L1361] EXPR s->s3 [L1361] EXPR (s->s3)->tmp.new_cipher [L1361] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={2:-1}, ((s->s3)->tmp.new_cipher)->algorithms=24606, (s->s3)->tmp.new_cipher={24601:0}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1361] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1364] ret = __VERIFIER_nondet_int() [L1365] COND TRUE blastFlag == 2 [L1366] blastFlag = 6 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1370] COND FALSE !(ret <= 0) VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1376] s->state = 8528 [L1377] s->init_num = 0 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND TRUE s->state == 8528 [L1381] EXPR s->s3 [L1381] EXPR (s->s3)->tmp.new_cipher [L1381] EXPR ((s->s3)->tmp.new_cipher)->algorithms [L1381] l = ((s->s3)->tmp.new_cipher)->algorithms [L1382] EXPR s->options VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, l=24606, ret=1, s={24590:0}, s={24590:0}, s->options=24610, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1382] COND TRUE s->options & 2097152UL [L1383] EXPR s->s3 [L1383] (s->s3)->tmp.use_rsa_tmp = 1 [L1387] EXPR s->s3 [L1387] (s->s3)->tmp.use_rsa_tmp VAL [={2:-1}, (s->s3)->tmp.use_rsa_tmp=1, blastFlag=6, got_new_session=1, init=1, l=24606, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1387] COND TRUE (s->s3)->tmp.use_rsa_tmp [L1405] ret = __VERIFIER_nondet_int() [L1406] COND TRUE blastFlag == 6 [L1407] blastFlag = 7 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1411] COND FALSE !(ret <= 0) VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1428] s->state = 8544 [L1429] s->init_num = 0 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1190] COND TRUE s->state == 8544 [L1433] EXPR s->verify_mode VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->verify_mode=24580, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1433] COND TRUE s->verify_mode & 1 [L1434] EXPR s->session [L1434] EXPR (s->session)->peer VAL [={2:-1}, (s->session)->peer={0:0}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->session={24579:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1434] COND FALSE !((unsigned long )(s->session)->peer != (unsigned long )((void *)0)) [L1444] EXPR s->s3 [L1444] EXPR (s->s3)->tmp.new_cipher [L1444] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={2:-1}, ((s->s3)->tmp.new_cipher)->algorithms=24606, (s->s3)->tmp.new_cipher={24601:0}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1444] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1454] EXPR s->s3 [L1454] (s->s3)->tmp.cert_request = 1 [L1455] ret = __VERIFIER_nondet_int() [L1456] COND TRUE blastFlag == 7 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=0, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1726] __VERIFIER_error() VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=0, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 159 locations, 1 error locations. UNSAFE Result, 15.5s OverallTime, 44 OverallIterations, 5 TraceHistogramMax, 9.2s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 9144 SDtfs, 2959 SDslu, 13377 SDs, 0 SdLazy, 8422 SolverSat, 454 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 6.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 292 GetRequests, 88 SyntacticMatches, 77 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1705occurred in iteration=43, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 43 MinimizatonAttempts, 2276 StatesRemovedByMinimization, 42 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.7s InterpolantComputationTime, 3753 NumberOfCodeBlocks, 3753 NumberOfCodeBlocksAsserted, 44 NumberOfCheckSat, 3577 ConstructedInterpolants, 0 QuantifiedInterpolants, 1033875 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 43 InterpolantComputations, 43 PerfectInterpolantSequences, 2080/2080 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 09:39:38,130 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 09:39:38,131 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 09:39:38,139 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 09:39:38,140 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 09:39:38,140 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 09:39:38,141 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 09:39:38,142 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 09:39:38,143 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 09:39:38,144 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 09:39:38,144 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 09:39:38,145 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 09:39:38,145 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 09:39:38,146 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 09:39:38,147 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 09:39:38,148 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 09:39:38,148 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 09:39:38,149 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 09:39:38,151 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 09:39:38,152 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 09:39:38,153 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 09:39:38,154 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 09:39:38,156 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 09:39:38,156 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 09:39:38,156 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 09:39:38,157 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 09:39:38,157 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 09:39:38,158 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 09:39:38,159 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 09:39:38,160 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 09:39:38,160 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 09:39:38,160 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 09:39:38,160 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 09:39:38,161 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 09:39:38,161 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 09:39:38,162 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 09:39:38,162 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Bitvector.epf [2018-11-23 09:39:38,172 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 09:39:38,172 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 09:39:38,173 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 09:39:38,173 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 09:39:38,173 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 09:39:38,173 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 09:39:38,174 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 09:39:38,174 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 09:39:38,174 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 09:39:38,174 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 09:39:38,174 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 09:39:38,174 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 09:39:38,174 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 09:39:38,175 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 09:39:38,175 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 09:39:38,175 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 09:39:38,175 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 09:39:38,175 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 09:39:38,175 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 09:39:38,175 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 09:39:38,175 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 09:39:38,176 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 09:39:38,176 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 09:39:38,176 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 09:39:38,176 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 09:39:38,176 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 09:39:38,176 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 09:39:38,176 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 09:39:38,177 INFO L133 SettingsManager]: * Trace refinement strategy=WOLF [2018-11-23 09:39:38,177 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 09:39:38,177 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 09:39:38,177 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 09:39:38,177 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0d6ad3f0294acf0e7c3fc00758f9075ea20494f3 [2018-11-23 09:39:38,209 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 09:39:38,217 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 09:39:38,220 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 09:39:38,221 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 09:39:38,221 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 09:39:38,222 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/../../sv-benchmarks/c/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-23 09:39:38,267 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/data/5c16f36fe/7f2c0540168d4cc2bfbde16683c1eac3/FLAGcbb4b65af [2018-11-23 09:39:38,679 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 09:39:38,680 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/sv-benchmarks/c/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-23 09:39:38,691 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/data/5c16f36fe/7f2c0540168d4cc2bfbde16683c1eac3/FLAGcbb4b65af [2018-11-23 09:39:38,702 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/data/5c16f36fe/7f2c0540168d4cc2bfbde16683c1eac3 [2018-11-23 09:39:38,704 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 09:39:38,705 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND TRUE 8512bv32 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: ~bvadd32(836bv32, #t~mem72!offset) }, 4bv32); [L1361] FCALL call #t~mem74 := read~intINTTYPE4({ base: #t~mem73!base, offset: ~bvadd32(12bv32, #t~mem73!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem72!base=2147625026bv32, #t~mem72!offset=0bv32, #t~mem73!base=409153bv32, #t~mem73!offset=36bv32, #t~mem74=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361-L1375] COND FALSE !(0bv32 != ~bvand32(256bv32, #t~mem74)) [L1361] havoc #t~mem74; [L1361] havoc #t~mem72; [L1361] havoc #t~mem73; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1365] COND TRUE 2bv32 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1370] COND FALSE !(~bvsle32(~ret~0, 0bv32)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1376] FCALL call write~intINTTYPE4(8528bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1377] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184] COND TRUE 8528bv32 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: ~bvadd32(836bv32, #t~mem76!offset) }, 4bv32); [L1381] FCALL call #t~mem78 := read~intINTTYPE4({ base: #t~mem77!base, offset: ~bvadd32(12bv32, #t~mem77!offset) }, 4bv32); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem76; [L1381] havoc #t~mem78; [L1381] havoc #t~mem77; [L1382] FCALL call #t~mem79 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(232bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem79=2101282bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1382-L1386] COND TRUE 0bv32 != ~bvand32(2097152bv32, #t~mem79) [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1383] FCALL call write~intINTTYPE4(1bv32, { base: #t~mem80!base, offset: ~bvadd32(871bv32, #t~mem80!offset) }, 4bv32); [L1383] havoc #t~mem80; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1387] FCALL call #t~mem83 := read~intINTTYPE4({ base: #t~mem82!base, offset: ~bvadd32(871bv32, #t~mem82!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem82!base=2147625026bv32, #t~mem82!offset=0bv32, #t~mem83=1bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387-L1427] COND TRUE 0bv32 != #t~mem83 [L1387] havoc #t~mem83; [L1387] havoc #t~mem82; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1406] COND TRUE 6bv32 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1411] COND FALSE !(~bvsle32(~ret~0, 0bv32)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1428] FCALL call write~intINTTYPE4(8544bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1429] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1190] COND TRUE 8544bv32 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433] FCALL call #t~mem93 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(180bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem93=1bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433-L1475] COND TRUE 0bv32 != ~bvand32(1bv32, #t~mem93) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: ~bvadd32(148bv32, #t~mem94!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem94!base=2bv32, #t~mem94!offset=0bv32, #t~mem95!base=2147483648bv32, #t~mem95!offset=2147483648bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1434] COND FALSE !(0bv32 != ~bvadd32(#t~mem95!base, #t~mem95!offset)) [L1434] havoc #t~mem94; [L1434] havoc #t~mem95; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: ~bvadd32(836bv32, #t~mem98!offset) }, 4bv32); [L1444] FCALL call #t~mem100 := read~intINTTYPE4({ base: #t~mem99!base, offset: ~bvadd32(12bv32, #t~mem99!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem100=0bv32, #t~mem98!base=2147625026bv32, #t~mem98!offset=0bv32, #t~mem99!base=409153bv32, #t~mem99!offset=36bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444-L1469] COND FALSE !(0bv32 != ~bvand32(256bv32, #t~mem100)) [L1444] havoc #t~mem100; [L1444] havoc #t~mem99; [L1444] havoc #t~mem98; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1454] FCALL call write~intINTTYPE4(1bv32, { base: #t~mem103!base, offset: ~bvadd32(895bv32, #t~mem103!offset) }, 4bv32); [L1454] havoc #t~mem103; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1456] COND TRUE 7bv32 == ~blastFlag~0 VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1726] assert false; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1157675074:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) VAL [init=1, malloc(sizeof(SSL))={409153:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={-2147342270:0}, s={409153:0}, SSLv3_server_data={1157675074:0}] [L1074] CALL ssl3_accept(s) VAL [init=1, s={409153:0}, SSLv3_server_data={1157675074:0}] [L1080] BUF_MEM *buf ; [L1081] unsigned long l ; [L1082] unsigned long Time ; [L1083] unsigned long tmp ; [L1084] void (*cb)() ; [L1085] long num1 ; [L1086] int ret ; [L1087] int new_state ; [L1088] int state ; [L1089] int skip ; [L1090] int got_new_session ; [L1091] int tmp___1 = __VERIFIER_nondet_int() ; [L1092] int tmp___2 = __VERIFIER_nondet_int() ; [L1093] int tmp___3 = __VERIFIER_nondet_int() ; [L1094] int tmp___4 = __VERIFIER_nondet_int() ; [L1095] int tmp___5 = __VERIFIER_nondet_int() ; [L1096] int tmp___6 = __VERIFIER_nondet_int() ; [L1097] int tmp___7 ; [L1098] long tmp___8 = __VERIFIER_nondet_long() ; [L1099] int tmp___9 = __VERIFIER_nondet_int() ; [L1100] int tmp___10 = __VERIFIER_nondet_int() ; [L1101] int blastFlag ; [L1105] s->state = 8464 [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->info_callback={3:0}, skip=0, SSLv3_server_data={1157675074:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] EXPR s->cert VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1157675074:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={3:0}, blastFlag=1, got_new_session=0, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={3:0}, (s->s3)->tmp.reuse_message=1073741824, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1347] COND FALSE !(ret <= 0) [L1352] s->hit VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->hit=0, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1352] COND FALSE !(s->hit) [L1355] s->state = 8512 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1357] s->init_num = 0 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={3:0}, (s->s3)->tmp.reuse_message=1073741824, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND TRUE s->state == 8512 [L1361] EXPR s->s3 [L1361] EXPR (s->s3)->tmp.new_cipher [L1361] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={3:0}, ((s->s3)->tmp.new_cipher)->algorithms=0, (s->s3)->tmp.new_cipher={409153:36}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1361] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1364] ret = __VERIFIER_nondet_int() [L1365] COND TRUE blastFlag == 2 [L1366] blastFlag = 6 VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1370] COND FALSE !(ret <= 0) VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1376] s->state = 8528 [L1377] s->init_num = 0 VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={3:0}, (s->s3)->tmp.reuse_message=1073741824, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND TRUE s->state == 8528 [L1381] EXPR s->s3 [L1381] EXPR (s->s3)->tmp.new_cipher [L1381] EXPR ((s->s3)->tmp.new_cipher)->algorithms [L1381] l = ((s->s3)->tmp.new_cipher)->algorithms [L1382] EXPR s->options VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->options=2101282, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1382] COND TRUE s->options & 2097152UL [L1383] EXPR s->s3 [L1383] (s->s3)->tmp.use_rsa_tmp = 1 [L1387] EXPR s->s3 [L1387] (s->s3)->tmp.use_rsa_tmp VAL [={3:0}, (s->s3)->tmp.use_rsa_tmp=1, blastFlag=6, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1387] COND TRUE (s->s3)->tmp.use_rsa_tmp [L1405] ret = __VERIFIER_nondet_int() [L1406] COND TRUE blastFlag == 6 [L1407] blastFlag = 7 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1411] COND FALSE !(ret <= 0) VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1428] s->state = 8544 [L1429] s->init_num = 0 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={3:0}, (s->s3)->tmp.reuse_message=1073741824, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1190] COND TRUE s->state == 8544 [L1433] EXPR s->verify_mode VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->verify_mode=1, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1433] COND TRUE s->verify_mode & 1 [L1434] EXPR s->session [L1434] EXPR (s->session)->peer VAL [={3:0}, (s->session)->peer={-2147483648:-2147483648}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->session={2:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1434] COND FALSE !((unsigned long )(s->session)->peer != (unsigned long )((void *)0)) [L1444] EXPR s->s3 [L1444] EXPR (s->s3)->tmp.new_cipher [L1444] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={3:0}, ((s->s3)->tmp.new_cipher)->algorithms=0, (s->s3)->tmp.new_cipher={409153:36}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1444] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1454] EXPR s->s3 [L1454] (s->s3)->tmp.cert_request = 1 [L1455] ret = __VERIFIER_nondet_int() [L1456] COND TRUE blastFlag == 7 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=0, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1726] __VERIFIER_error() VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=0, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] ----- [2018-11-23 09:41:01,600 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 09:41:01 BoogieIcfgContainer [2018-11-23 09:41:01,600 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 09:41:01,601 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 09:41:01,601 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 09:41:01,601 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 09:41:01,602 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:39:41" (3/4) ... [2018-11-23 09:41:01,604 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv0 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv0 32)] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] RET #633#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret138 := main(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); VAL [main_~s~0.base=(_ bv409153 32), main_~s~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc3.base|=(_ bv409153 32), |main_#t~malloc3.offset|=(_ bv0 32), |main_#t~malloc4.base|=(_ bv2147625026 32), |main_#t~malloc4.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv3 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~malloc6.base|=(_ bv2 32), |main_#t~malloc6.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19.base|=(_ bv3 32), |ssl3_accept_#t~mem19.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22.base|=(_ bv1 32), |ssl3_accept_#t~mem22.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset));havoc #t~mem22.base, #t~mem22.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8464bv32 == #t~mem32;havoc #t~mem32; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet69;havoc #t~nondet69; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem127.base|=(_ bv2147625026 32), |ssl3_accept_#t~mem127.offset|=(_ bv0 32), |ssl3_accept_#t~mem128|=(_ bv1073741824 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8496bv32 == #t~mem35;havoc #t~mem35; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet70;havoc #t~nondet70; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 1bv32 == ~blastFlag~0;~blastFlag~0 := 2bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem71|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != #t~mem71);havoc #t~mem71;call write~intINTTYPE4(8512bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem127.base|=(_ bv2147625026 32), |ssl3_accept_#t~mem127.offset|=(_ bv0 32), |ssl3_accept_#t~mem128|=(_ bv1073741824 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8512 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8512bv32 == #t~mem37;havoc #t~mem37; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, ~bvadd32(836bv32, #t~mem72.offset), 4bv32);call #t~mem74 := read~intINTTYPE4(#t~mem73.base, ~bvadd32(12bv32, #t~mem73.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem72.base|=(_ bv2147625026 32), |ssl3_accept_#t~mem72.offset|=(_ bv0 32), |ssl3_accept_#t~mem73.base|=(_ bv409153 32), |ssl3_accept_#t~mem73.offset|=(_ bv36 32), |ssl3_accept_#t~mem74|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != ~bvand32(256bv32, #t~mem74));havoc #t~mem74;havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem73.base, #t~mem73.offset;~ret~0 := #t~nondet75;havoc #t~nondet75; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 2bv32 == ~blastFlag~0;~blastFlag~0 := 6bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(8528bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem127.base|=(_ bv2147625026 32), |ssl3_accept_#t~mem127.offset|=(_ bv0 32), |ssl3_accept_#t~mem128|=(_ bv1073741824 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8512 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8512bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem38|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8513bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem39|=(_ bv8528 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8528bv32 == #t~mem39;havoc #t~mem39; VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, ~bvadd32(836bv32, #t~mem76.offset), 4bv32);call #t~mem78 := read~intINTTYPE4(#t~mem77.base, ~bvadd32(12bv32, #t~mem77.offset), 4bv32);~l~0 := #t~mem78;havoc #t~mem76.base, #t~mem76.offset;havoc #t~mem78;havoc #t~mem77.base, #t~mem77.offset;call #t~mem79 := read~intINTTYPE4(~s.base, ~bvadd32(232bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem79|=(_ bv2101282 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != ~bvand32(2097152bv32, #t~mem79);havoc #t~mem79;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem80.base, ~bvadd32(871bv32, #t~mem80.offset), 4bv32);havoc #t~mem80.base, #t~mem80.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem83 := read~intINTTYPE4(#t~mem82.base, ~bvadd32(871bv32, #t~mem82.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem82.base|=(_ bv2147625026 32), |ssl3_accept_#t~mem82.offset|=(_ bv0 32), |ssl3_accept_#t~mem83|=(_ bv1 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != #t~mem83;havoc #t~mem83;havoc #t~mem82.base, #t~mem82.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet92;havoc #t~nondet92; VAL [ssl3_accept_~blastFlag~0=(_ bv6 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 6bv32 == ~blastFlag~0;~blastFlag~0 := 7bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(8544bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem127.base|=(_ bv2147625026 32), |ssl3_accept_#t~mem127.offset|=(_ bv0 32), |ssl3_accept_#t~mem128|=(_ bv1073741824 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8528 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8512bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem38|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8513bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem39|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8528bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem40|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8529bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem41|=(_ bv8544 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8544bv32 == #t~mem41;havoc #t~mem41; VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem93|=(_ bv1 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != ~bvand32(1bv32, #t~mem93);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem94.base|=(_ bv2 32), |ssl3_accept_#t~mem94.offset|=(_ bv0 32), |ssl3_accept_#t~mem95.base|=(_ bv2147483648 32), |ssl3_accept_#t~mem95.offset|=(_ bv2147483648 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != ~bvadd32(#t~mem95.base, #t~mem95.offset));havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem100|=(_ bv0 32), |ssl3_accept_#t~mem98.base|=(_ bv2147625026 32), |ssl3_accept_#t~mem98.offset|=(_ bv0 32), |ssl3_accept_#t~mem99.base|=(_ bv409153 32), |ssl3_accept_#t~mem99.offset|=(_ bv36 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != ~bvand32(256bv32, #t~mem100));havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 7bv32 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv7 32), ssl3_accept_~cb~0.base=(_ bv3 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~l~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv409153 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8544 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv409153 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1157675074 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=0bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L1042] ~init~0 := 1bv32; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32); [L1043] call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc3.base=409153bv32, #t~malloc3.offset=0bv32, #t~malloc4.base=2147625026bv32, #t~malloc4.offset=0bv32, #t~malloc5.base=3bv32, #t~malloc5.offset=0bv32, #t~malloc6.base=2bv32, #t~malloc6.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32, ~s~0.base=409153bv32, ~s~0.offset=0bv32] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1079-L1728] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1080] havoc ~buf~0.base, ~buf~0.offset; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0.base, ~cb~0.offset; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1106] ~blastFlag~0 := 0bv32; [L1107] call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); [L1107] havoc #t~nondet17; [L1108] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0.base, ~cb~0.offset := 0bv32, 0bv32; [L1112] ~ret~0 := 4294967295bv32; [L1113] ~skip~0 := 0bv32; [L1114] ~got_new_session~0 := 0bv32; [L1115] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19.base=3bv32, #t~mem19.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1115-L1119] assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset); [L1115] havoc #t~mem19.base, #t~mem19.offset; [L1116] call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); [L1116] ~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset; [L1116] havoc #t~mem20.base, #t~mem20.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1120] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1120] call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1120] havoc #t~mem21; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1121-L1129] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1130] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22.base=1bv32, #t~mem22.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1130-L1134] assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset)); [L1130] havoc #t~mem22.base, #t~mem22.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] assume !false; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139-L1684] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142-L1683] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145-L1682] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148-L1681] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151-L1680] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154-L1679] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157-L1678] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160-L1677] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163-L1676] assume 8464bv32 == #t~mem32; [L1163] havoc #t~mem32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1323] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32); [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1325-L1329] assume 0bv32 == ~blastFlag~0; [L1326] ~blastFlag~0 := 1bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1330-L1334] assume !~bvsle32(~ret~0, 0bv32); [L1335] ~got_new_session~0 := 1bv32; [L1336] call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1337] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1685] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=2147625026bv32, #t~mem127.offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685-L1713] assume !(0bv32 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] assume !false; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139-L1684] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142-L1683] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145-L1682] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148-L1681] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151-L1680] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154-L1679] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157-L1678] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160-L1677] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163-L1676] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166-L1675] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169-L1674] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172-L1673] assume 8496bv32 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1342-L1346] assume 1bv32 == ~blastFlag~0; [L1343] ~blastFlag~0 := 2bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] assume !~bvsle32(~ret~0, 0bv32); [L1352] call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem71=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1352-L1356] assume !(0bv32 != #t~mem71); [L1352] havoc #t~mem71; [L1355] call write~intINTTYPE4(8512bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1357] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1685] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=2147625026bv32, #t~mem127.offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685-L1713] assume !(0bv32 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] assume !false; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139-L1684] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142-L1683] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145-L1682] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148-L1681] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151-L1680] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154-L1679] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157-L1678] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160-L1677] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163-L1676] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166-L1675] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169-L1674] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172-L1673] assume !(8496bv32 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175-L1672] assume !(8497bv32 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178-L1671] assume 8512bv32 == #t~mem37; [L1178] havoc #t~mem37; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1361] call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, ~bvadd32(836bv32, #t~mem72.offset), 4bv32); [L1361] call #t~mem74 := read~intINTTYPE4(#t~mem73.base, ~bvadd32(12bv32, #t~mem73.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem72.base=2147625026bv32, #t~mem72.offset=0bv32, #t~mem73.base=409153bv32, #t~mem73.offset=36bv32, #t~mem74=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361-L1375] assume !(0bv32 != ~bvand32(256bv32, #t~mem74)); [L1361] havoc #t~mem74; [L1361] havoc #t~mem72.base, #t~mem72.offset; [L1361] havoc #t~mem73.base, #t~mem73.offset; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1365-L1369] assume 2bv32 == ~blastFlag~0; [L1366] ~blastFlag~0 := 6bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1370-L1374] assume !~bvsle32(~ret~0, 0bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1376] call write~intINTTYPE4(8528bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1377] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1685] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=2147625026bv32, #t~mem127.offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685-L1713] assume !(0bv32 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] assume !false; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139-L1684] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142-L1683] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145-L1682] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148-L1681] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151-L1680] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154-L1679] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157-L1678] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160-L1677] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163-L1676] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166-L1675] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169-L1674] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172-L1673] assume !(8496bv32 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175-L1672] assume !(8497bv32 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178-L1671] assume !(8512bv32 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181-L1670] assume !(8513bv32 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184-L1669] assume 8528bv32 == #t~mem39; [L1184] havoc #t~mem39; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1381] call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1381] call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, ~bvadd32(836bv32, #t~mem76.offset), 4bv32); [L1381] call #t~mem78 := read~intINTTYPE4(#t~mem77.base, ~bvadd32(12bv32, #t~mem77.offset), 4bv32); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem76.base, #t~mem76.offset; [L1381] havoc #t~mem78; [L1381] havoc #t~mem77.base, #t~mem77.offset; [L1382] call #t~mem79 := read~intINTTYPE4(~s.base, ~bvadd32(232bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem79=2101282bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1382-L1386] assume 0bv32 != ~bvand32(2097152bv32, #t~mem79); [L1382] havoc #t~mem79; [L1383] call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1383] call write~intINTTYPE4(1bv32, #t~mem80.base, ~bvadd32(871bv32, #t~mem80.offset), 4bv32); [L1383] havoc #t~mem80.base, #t~mem80.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1387] call #t~mem83 := read~intINTTYPE4(#t~mem82.base, ~bvadd32(871bv32, #t~mem82.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem82.base=2147625026bv32, #t~mem82.offset=0bv32, #t~mem83=1bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387-L1427] assume 0bv32 != #t~mem83; [L1387] havoc #t~mem83; [L1387] havoc #t~mem82.base, #t~mem82.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1406-L1410] assume 6bv32 == ~blastFlag~0; [L1407] ~blastFlag~0 := 7bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1411-L1415] assume !~bvsle32(~ret~0, 0bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1428] call write~intINTTYPE4(8544bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1429] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1685] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=2147625026bv32, #t~mem127.offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685-L1713] assume !(0bv32 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] assume !false; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139-L1684] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142-L1683] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145-L1682] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148-L1681] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151-L1680] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154-L1679] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157-L1678] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160-L1677] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163-L1676] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166-L1675] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169-L1674] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172-L1673] assume !(8496bv32 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175-L1672] assume !(8497bv32 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178-L1671] assume !(8512bv32 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181-L1670] assume !(8513bv32 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184-L1669] assume !(8528bv32 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1187-L1668] assume !(8529bv32 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1190-L1667] assume 8544bv32 == #t~mem41; [L1190] havoc #t~mem41; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433] call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem93=1bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433-L1475] assume 0bv32 != ~bvand32(1bv32, #t~mem93); [L1433] havoc #t~mem93; [L1434] call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32); [L1434] call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem94.base=2bv32, #t~mem94.offset=0bv32, #t~mem95.base=2147483648bv32, #t~mem95.offset=2147483648bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1434-L1470] assume !(0bv32 != ~bvadd32(#t~mem95.base, #t~mem95.offset)); [L1434] havoc #t~mem94.base, #t~mem94.offset; [L1434] havoc #t~mem95.base, #t~mem95.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444] call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1444] call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32); [L1444] call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem100=0bv32, #t~mem98.base=2147625026bv32, #t~mem98.offset=0bv32, #t~mem99.base=409153bv32, #t~mem99.offset=36bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444-L1469] assume !(0bv32 != ~bvand32(256bv32, #t~mem100)); [L1444] havoc #t~mem100; [L1444] havoc #t~mem99.base, #t~mem99.offset; [L1444] havoc #t~mem98.base, #t~mem98.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1454] call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1454] call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32); [L1454] havoc #t~mem103.base, #t~mem103.offset; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1456-L1460] assume 7bv32 == ~blastFlag~0; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1726] assert false; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=0bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L1042] ~init~0 := 1bv32; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32); [L1043] call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc3.base=409153bv32, #t~malloc3.offset=0bv32, #t~malloc4.base=2147625026bv32, #t~malloc4.offset=0bv32, #t~malloc5.base=3bv32, #t~malloc5.offset=0bv32, #t~malloc6.base=2bv32, #t~malloc6.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32, ~s~0.base=409153bv32, ~s~0.offset=0bv32] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1079-L1728] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1080] havoc ~buf~0.base, ~buf~0.offset; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0.base, ~cb~0.offset; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1106] ~blastFlag~0 := 0bv32; [L1107] call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); [L1107] havoc #t~nondet17; [L1108] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0.base, ~cb~0.offset := 0bv32, 0bv32; [L1112] ~ret~0 := 4294967295bv32; [L1113] ~skip~0 := 0bv32; [L1114] ~got_new_session~0 := 0bv32; [L1115] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19.base=3bv32, #t~mem19.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1115-L1119] assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset); [L1115] havoc #t~mem19.base, #t~mem19.offset; [L1116] call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); [L1116] ~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset; [L1116] havoc #t~mem20.base, #t~mem20.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1120] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1120] call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1120] havoc #t~mem21; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1121-L1129] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1130] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22.base=1bv32, #t~mem22.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1130-L1134] assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset)); [L1130] havoc #t~mem22.base, #t~mem22.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] assume !false; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139-L1684] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142-L1683] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145-L1682] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148-L1681] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151-L1680] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154-L1679] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157-L1678] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160-L1677] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8464bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163-L1676] assume 8464bv32 == #t~mem32; [L1163] havoc #t~mem32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1323] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32); [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1325-L1329] assume 0bv32 == ~blastFlag~0; [L1326] ~blastFlag~0 := 1bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1330-L1334] assume !~bvsle32(~ret~0, 0bv32); [L1335] ~got_new_session~0 := 1bv32; [L1336] call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1337] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1685] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=2147625026bv32, #t~mem127.offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685-L1713] assume !(0bv32 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] assume !false; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139-L1684] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142-L1683] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145-L1682] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148-L1681] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151-L1680] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154-L1679] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157-L1678] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160-L1677] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163-L1676] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166-L1675] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169-L1674] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8496bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172-L1673] assume 8496bv32 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1342-L1346] assume 1bv32 == ~blastFlag~0; [L1343] ~blastFlag~0 := 2bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] assume !~bvsle32(~ret~0, 0bv32); [L1352] call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem71=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1352-L1356] assume !(0bv32 != #t~mem71); [L1352] havoc #t~mem71; [L1355] call write~intINTTYPE4(8512bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1357] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1685] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=2147625026bv32, #t~mem127.offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685-L1713] assume !(0bv32 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] assume !false; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139-L1684] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142-L1683] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145-L1682] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148-L1681] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151-L1680] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154-L1679] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157-L1678] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160-L1677] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163-L1676] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166-L1675] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169-L1674] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172-L1673] assume !(8496bv32 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175-L1672] assume !(8497bv32 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8512bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178-L1671] assume 8512bv32 == #t~mem37; [L1178] havoc #t~mem37; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1361] call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, ~bvadd32(836bv32, #t~mem72.offset), 4bv32); [L1361] call #t~mem74 := read~intINTTYPE4(#t~mem73.base, ~bvadd32(12bv32, #t~mem73.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem72.base=2147625026bv32, #t~mem72.offset=0bv32, #t~mem73.base=409153bv32, #t~mem73.offset=36bv32, #t~mem74=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361-L1375] assume !(0bv32 != ~bvand32(256bv32, #t~mem74)); [L1361] havoc #t~mem74; [L1361] havoc #t~mem72.base, #t~mem72.offset; [L1361] havoc #t~mem73.base, #t~mem73.offset; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1365-L1369] assume 2bv32 == ~blastFlag~0; [L1366] ~blastFlag~0 := 6bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1370-L1374] assume !~bvsle32(~ret~0, 0bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1376] call write~intINTTYPE4(8528bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1377] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1685] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=2147625026bv32, #t~mem127.offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685-L1713] assume !(0bv32 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] assume !false; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139-L1684] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142-L1683] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145-L1682] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148-L1681] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151-L1680] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154-L1679] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157-L1678] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160-L1677] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163-L1676] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166-L1675] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169-L1674] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172-L1673] assume !(8496bv32 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175-L1672] assume !(8497bv32 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178-L1671] assume !(8512bv32 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181-L1670] assume !(8513bv32 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8528bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184-L1669] assume 8528bv32 == #t~mem39; [L1184] havoc #t~mem39; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1381] call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1381] call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, ~bvadd32(836bv32, #t~mem76.offset), 4bv32); [L1381] call #t~mem78 := read~intINTTYPE4(#t~mem77.base, ~bvadd32(12bv32, #t~mem77.offset), 4bv32); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem76.base, #t~mem76.offset; [L1381] havoc #t~mem78; [L1381] havoc #t~mem77.base, #t~mem77.offset; [L1382] call #t~mem79 := read~intINTTYPE4(~s.base, ~bvadd32(232bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem79=2101282bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1382-L1386] assume 0bv32 != ~bvand32(2097152bv32, #t~mem79); [L1382] havoc #t~mem79; [L1383] call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1383] call write~intINTTYPE4(1bv32, #t~mem80.base, ~bvadd32(871bv32, #t~mem80.offset), 4bv32); [L1383] havoc #t~mem80.base, #t~mem80.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1387] call #t~mem83 := read~intINTTYPE4(#t~mem82.base, ~bvadd32(871bv32, #t~mem82.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem82.base=2147625026bv32, #t~mem82.offset=0bv32, #t~mem83=1bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387-L1427] assume 0bv32 != #t~mem83; [L1387] havoc #t~mem83; [L1387] havoc #t~mem82.base, #t~mem82.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=6bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1406-L1410] assume 6bv32 == ~blastFlag~0; [L1407] ~blastFlag~0 := 7bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1411-L1415] assume !~bvsle32(~ret~0, 0bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1428] call write~intINTTYPE4(8544bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1429] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1685] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=2147625026bv32, #t~mem127.offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685-L1713] assume !(0bv32 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] assume !false; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139-L1684] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142-L1683] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145-L1682] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148-L1681] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151-L1680] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154-L1679] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157-L1678] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160-L1677] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163-L1676] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166-L1675] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169-L1674] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172-L1673] assume !(8496bv32 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175-L1672] assume !(8497bv32 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178-L1671] assume !(8512bv32 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181-L1670] assume !(8513bv32 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184-L1669] assume !(8528bv32 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1187-L1668] assume !(8529bv32 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8544bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1190-L1667] assume 8544bv32 == #t~mem41; [L1190] havoc #t~mem41; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433] call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem93=1bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433-L1475] assume 0bv32 != ~bvand32(1bv32, #t~mem93); [L1433] havoc #t~mem93; [L1434] call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32); [L1434] call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem94.base=2bv32, #t~mem94.offset=0bv32, #t~mem95.base=2147483648bv32, #t~mem95.offset=2147483648bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1434-L1470] assume !(0bv32 != ~bvadd32(#t~mem95.base, #t~mem95.offset)); [L1434] havoc #t~mem94.base, #t~mem94.offset; [L1434] havoc #t~mem95.base, #t~mem95.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444] call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1444] call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32); [L1444] call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem100=0bv32, #t~mem98.base=2147625026bv32, #t~mem98.offset=0bv32, #t~mem99.base=409153bv32, #t~mem99.offset=36bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444-L1469] assume !(0bv32 != ~bvand32(256bv32, #t~mem100)); [L1444] havoc #t~mem100; [L1444] havoc #t~mem99.base, #t~mem99.offset; [L1444] havoc #t~mem98.base, #t~mem98.offset; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1454] call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1454] call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32); [L1454] havoc #t~mem103.base, #t~mem103.offset; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1456-L1460] assume 7bv32 == ~blastFlag~0; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1726] assert false; VAL [#in~s.base=409153bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1157675074bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=7bv32, ~cb~0.base=3bv32, ~cb~0.offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s.base=409153bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=409153bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=2147625026bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=409153bv32, ~s~0!offset=0bv32] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1079-L1728] ~s := #in~s; [L1080] havoc ~buf~0; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet17, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet17; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1112] ~ret~0 := 4294967295bv32; [L1113] ~skip~0 := 0bv32; [L1114] ~got_new_session~0 := 0bv32; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19!base=3bv32, #t~mem19!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1115] COND TRUE 0bv32 != ~bvadd32(#t~mem19!base, #t~mem19!offset) [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1120] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] havoc #t~mem21; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1121-L1129] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22!base=1bv32, #t~mem22!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1130] COND FALSE !(0bv32 == ~bvadd32(#t~mem22!base, #t~mem22!offset)) [L1130] havoc #t~mem22; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND TRUE 8464bv32 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1323] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1325] COND TRUE 0bv32 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1330] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1335] ~got_new_session~0 := 1bv32; [L1336] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1337] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND TRUE 8496bv32 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1342] COND TRUE 1bv32 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1347] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1352] FCALL call #t~mem71 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem71=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1352-L1356] COND FALSE !(0bv32 != #t~mem71) [L1352] havoc #t~mem71; [L1355] FCALL call write~intINTTYPE4(8512bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1357] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND TRUE 8512bv32 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: ~bvadd32(836bv32, #t~mem72!offset) }, 4bv32); [L1361] FCALL call #t~mem74 := read~intINTTYPE4({ base: #t~mem73!base, offset: ~bvadd32(12bv32, #t~mem73!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem72!base=2147625026bv32, #t~mem72!offset=0bv32, #t~mem73!base=409153bv32, #t~mem73!offset=36bv32, #t~mem74=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361-L1375] COND FALSE !(0bv32 != ~bvand32(256bv32, #t~mem74)) [L1361] havoc #t~mem74; [L1361] havoc #t~mem72; [L1361] havoc #t~mem73; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1365] COND TRUE 2bv32 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1370] COND FALSE !(~bvsle32(~ret~0, 0bv32)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1376] FCALL call write~intINTTYPE4(8528bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1377] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184] COND TRUE 8528bv32 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: ~bvadd32(836bv32, #t~mem76!offset) }, 4bv32); [L1381] FCALL call #t~mem78 := read~intINTTYPE4({ base: #t~mem77!base, offset: ~bvadd32(12bv32, #t~mem77!offset) }, 4bv32); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem76; [L1381] havoc #t~mem78; [L1381] havoc #t~mem77; [L1382] FCALL call #t~mem79 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(232bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem79=2101282bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1382-L1386] COND TRUE 0bv32 != ~bvand32(2097152bv32, #t~mem79) [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1383] FCALL call write~intINTTYPE4(1bv32, { base: #t~mem80!base, offset: ~bvadd32(871bv32, #t~mem80!offset) }, 4bv32); [L1383] havoc #t~mem80; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1387] FCALL call #t~mem83 := read~intINTTYPE4({ base: #t~mem82!base, offset: ~bvadd32(871bv32, #t~mem82!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem82!base=2147625026bv32, #t~mem82!offset=0bv32, #t~mem83=1bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387-L1427] COND TRUE 0bv32 != #t~mem83 [L1387] havoc #t~mem83; [L1387] havoc #t~mem82; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1406] COND TRUE 6bv32 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1411] COND FALSE !(~bvsle32(~ret~0, 0bv32)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1428] FCALL call write~intINTTYPE4(8544bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1429] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1190] COND TRUE 8544bv32 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433] FCALL call #t~mem93 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(180bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem93=1bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433-L1475] COND TRUE 0bv32 != ~bvand32(1bv32, #t~mem93) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: ~bvadd32(148bv32, #t~mem94!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem94!base=2bv32, #t~mem94!offset=0bv32, #t~mem95!base=2147483648bv32, #t~mem95!offset=2147483648bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1434] COND FALSE !(0bv32 != ~bvadd32(#t~mem95!base, #t~mem95!offset)) [L1434] havoc #t~mem94; [L1434] havoc #t~mem95; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: ~bvadd32(836bv32, #t~mem98!offset) }, 4bv32); [L1444] FCALL call #t~mem100 := read~intINTTYPE4({ base: #t~mem99!base, offset: ~bvadd32(12bv32, #t~mem99!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem100=0bv32, #t~mem98!base=2147625026bv32, #t~mem98!offset=0bv32, #t~mem99!base=409153bv32, #t~mem99!offset=36bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444-L1469] COND FALSE !(0bv32 != ~bvand32(256bv32, #t~mem100)) [L1444] havoc #t~mem100; [L1444] havoc #t~mem99; [L1444] havoc #t~mem98; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1454] FCALL call write~intINTTYPE4(1bv32, { base: #t~mem103!base, offset: ~bvadd32(895bv32, #t~mem103!offset) }, 4bv32); [L1454] havoc #t~mem103; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1456] COND TRUE 7bv32 == ~blastFlag~0 VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1726] assert false; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=409153bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=2147625026bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=409153bv32, ~s~0!offset=0bv32] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1079-L1728] ~s := #in~s; [L1080] havoc ~buf~0; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet17, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet17; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1112] ~ret~0 := 4294967295bv32; [L1113] ~skip~0 := 0bv32; [L1114] ~got_new_session~0 := 0bv32; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19!base=3bv32, #t~mem19!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1115] COND TRUE 0bv32 != ~bvadd32(#t~mem19!base, #t~mem19!offset) [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1120] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] havoc #t~mem21; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1121-L1129] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22!base=1bv32, #t~mem22!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1130] COND FALSE !(0bv32 == ~bvadd32(#t~mem22!base, #t~mem22!offset)) [L1130] havoc #t~mem22; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND TRUE 8464bv32 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1323] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1325] COND TRUE 0bv32 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1330] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1335] ~got_new_session~0 := 1bv32; [L1336] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1337] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND TRUE 8496bv32 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1342] COND TRUE 1bv32 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1347] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1352] FCALL call #t~mem71 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem71=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1352-L1356] COND FALSE !(0bv32 != #t~mem71) [L1352] havoc #t~mem71; [L1355] FCALL call write~intINTTYPE4(8512bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1357] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND TRUE 8512bv32 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: ~bvadd32(836bv32, #t~mem72!offset) }, 4bv32); [L1361] FCALL call #t~mem74 := read~intINTTYPE4({ base: #t~mem73!base, offset: ~bvadd32(12bv32, #t~mem73!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem72!base=2147625026bv32, #t~mem72!offset=0bv32, #t~mem73!base=409153bv32, #t~mem73!offset=36bv32, #t~mem74=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361-L1375] COND FALSE !(0bv32 != ~bvand32(256bv32, #t~mem74)) [L1361] havoc #t~mem74; [L1361] havoc #t~mem72; [L1361] havoc #t~mem73; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1365] COND TRUE 2bv32 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1370] COND FALSE !(~bvsle32(~ret~0, 0bv32)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1376] FCALL call write~intINTTYPE4(8528bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1377] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184] COND TRUE 8528bv32 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: ~bvadd32(836bv32, #t~mem76!offset) }, 4bv32); [L1381] FCALL call #t~mem78 := read~intINTTYPE4({ base: #t~mem77!base, offset: ~bvadd32(12bv32, #t~mem77!offset) }, 4bv32); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem76; [L1381] havoc #t~mem78; [L1381] havoc #t~mem77; [L1382] FCALL call #t~mem79 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(232bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem79=2101282bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1382-L1386] COND TRUE 0bv32 != ~bvand32(2097152bv32, #t~mem79) [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1383] FCALL call write~intINTTYPE4(1bv32, { base: #t~mem80!base, offset: ~bvadd32(871bv32, #t~mem80!offset) }, 4bv32); [L1383] havoc #t~mem80; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1387] FCALL call #t~mem83 := read~intINTTYPE4({ base: #t~mem82!base, offset: ~bvadd32(871bv32, #t~mem82!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem82!base=2147625026bv32, #t~mem82!offset=0bv32, #t~mem83=1bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387-L1427] COND TRUE 0bv32 != #t~mem83 [L1387] havoc #t~mem83; [L1387] havoc #t~mem82; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1406] COND TRUE 6bv32 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1411] COND FALSE !(~bvsle32(~ret~0, 0bv32)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1428] FCALL call write~intINTTYPE4(8544bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1429] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1190] COND TRUE 8544bv32 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433] FCALL call #t~mem93 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(180bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem93=1bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433-L1475] COND TRUE 0bv32 != ~bvand32(1bv32, #t~mem93) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: ~bvadd32(148bv32, #t~mem94!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem94!base=2bv32, #t~mem94!offset=0bv32, #t~mem95!base=2147483648bv32, #t~mem95!offset=2147483648bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1434] COND FALSE !(0bv32 != ~bvadd32(#t~mem95!base, #t~mem95!offset)) [L1434] havoc #t~mem94; [L1434] havoc #t~mem95; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: ~bvadd32(836bv32, #t~mem98!offset) }, 4bv32); [L1444] FCALL call #t~mem100 := read~intINTTYPE4({ base: #t~mem99!base, offset: ~bvadd32(12bv32, #t~mem99!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem100=0bv32, #t~mem98!base=2147625026bv32, #t~mem98!offset=0bv32, #t~mem99!base=409153bv32, #t~mem99!offset=36bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444-L1469] COND FALSE !(0bv32 != ~bvand32(256bv32, #t~mem100)) [L1444] havoc #t~mem100; [L1444] havoc #t~mem99; [L1444] havoc #t~mem98; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1454] FCALL call write~intINTTYPE4(1bv32, { base: #t~mem103!base, offset: ~bvadd32(895bv32, #t~mem103!offset) }, 4bv32); [L1454] havoc #t~mem103; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1456] COND TRUE 7bv32 == ~blastFlag~0 VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1726] assert false; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=409153bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=2147625026bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=409153bv32, ~s~0!offset=0bv32] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1079-L1728] ~s := #in~s; [L1080] havoc ~buf~0; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet17, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet17; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1112] ~ret~0 := 4294967295bv32; [L1113] ~skip~0 := 0bv32; [L1114] ~got_new_session~0 := 0bv32; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19!base=3bv32, #t~mem19!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1115] COND TRUE 0bv32 != ~bvadd32(#t~mem19!base, #t~mem19!offset) [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1120] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] havoc #t~mem21; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1121-L1129] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22!base=1bv32, #t~mem22!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1130] COND FALSE !(0bv32 == ~bvadd32(#t~mem22!base, #t~mem22!offset)) [L1130] havoc #t~mem22; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND TRUE 8464bv32 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1323] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1325] COND TRUE 0bv32 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1330] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1335] ~got_new_session~0 := 1bv32; [L1336] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1337] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND TRUE 8496bv32 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1342] COND TRUE 1bv32 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1347] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1352] FCALL call #t~mem71 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem71=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1352-L1356] COND FALSE !(0bv32 != #t~mem71) [L1352] havoc #t~mem71; [L1355] FCALL call write~intINTTYPE4(8512bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1357] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND TRUE 8512bv32 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: ~bvadd32(836bv32, #t~mem72!offset) }, 4bv32); [L1361] FCALL call #t~mem74 := read~intINTTYPE4({ base: #t~mem73!base, offset: ~bvadd32(12bv32, #t~mem73!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem72!base=2147625026bv32, #t~mem72!offset=0bv32, #t~mem73!base=409153bv32, #t~mem73!offset=36bv32, #t~mem74=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361-L1375] COND FALSE !(0bv32 != ~bvand32(256bv32, #t~mem74)) [L1361] havoc #t~mem74; [L1361] havoc #t~mem72; [L1361] havoc #t~mem73; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1365] COND TRUE 2bv32 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1370] COND FALSE !(~bvsle32(~ret~0, 0bv32)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1376] FCALL call write~intINTTYPE4(8528bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1377] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184] COND TRUE 8528bv32 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: ~bvadd32(836bv32, #t~mem76!offset) }, 4bv32); [L1381] FCALL call #t~mem78 := read~intINTTYPE4({ base: #t~mem77!base, offset: ~bvadd32(12bv32, #t~mem77!offset) }, 4bv32); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem76; [L1381] havoc #t~mem78; [L1381] havoc #t~mem77; [L1382] FCALL call #t~mem79 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(232bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem79=2101282bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1382-L1386] COND TRUE 0bv32 != ~bvand32(2097152bv32, #t~mem79) [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1383] FCALL call write~intINTTYPE4(1bv32, { base: #t~mem80!base, offset: ~bvadd32(871bv32, #t~mem80!offset) }, 4bv32); [L1383] havoc #t~mem80; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1387] FCALL call #t~mem83 := read~intINTTYPE4({ base: #t~mem82!base, offset: ~bvadd32(871bv32, #t~mem82!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem82!base=2147625026bv32, #t~mem82!offset=0bv32, #t~mem83=1bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387-L1427] COND TRUE 0bv32 != #t~mem83 [L1387] havoc #t~mem83; [L1387] havoc #t~mem82; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1406] COND TRUE 6bv32 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1411] COND FALSE !(~bvsle32(~ret~0, 0bv32)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1428] FCALL call write~intINTTYPE4(8544bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1429] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1190] COND TRUE 8544bv32 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433] FCALL call #t~mem93 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(180bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem93=1bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433-L1475] COND TRUE 0bv32 != ~bvand32(1bv32, #t~mem93) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: ~bvadd32(148bv32, #t~mem94!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem94!base=2bv32, #t~mem94!offset=0bv32, #t~mem95!base=2147483648bv32, #t~mem95!offset=2147483648bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1434] COND FALSE !(0bv32 != ~bvadd32(#t~mem95!base, #t~mem95!offset)) [L1434] havoc #t~mem94; [L1434] havoc #t~mem95; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: ~bvadd32(836bv32, #t~mem98!offset) }, 4bv32); [L1444] FCALL call #t~mem100 := read~intINTTYPE4({ base: #t~mem99!base, offset: ~bvadd32(12bv32, #t~mem99!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem100=0bv32, #t~mem98!base=2147625026bv32, #t~mem98!offset=0bv32, #t~mem99!base=409153bv32, #t~mem99!offset=36bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444-L1469] COND FALSE !(0bv32 != ~bvand32(256bv32, #t~mem100)) [L1444] havoc #t~mem100; [L1444] havoc #t~mem99; [L1444] havoc #t~mem98; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1454] FCALL call write~intINTTYPE4(1bv32, { base: #t~mem103!base, offset: ~bvadd32(895bv32, #t~mem103!offset) }, 4bv32); [L1454] havoc #t~mem103; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1456] COND TRUE 7bv32 == ~blastFlag~0 VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1726] assert false; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] ----- [2018-11-23 09:41:06,708 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 09:41:06,751 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=409153bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=2147625026bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=409153bv32, ~s~0!offset=0bv32] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1079-L1728] ~s := #in~s; [L1080] havoc ~buf~0; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet17, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet17; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1112] ~ret~0 := 4294967295bv32; [L1113] ~skip~0 := 0bv32; [L1114] ~got_new_session~0 := 0bv32; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19!base=3bv32, #t~mem19!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1115] COND TRUE 0bv32 != ~bvadd32(#t~mem19!base, #t~mem19!offset) [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1120] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] havoc #t~mem21; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1121-L1129] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22!base=1bv32, #t~mem22!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1130] COND FALSE !(0bv32 == ~bvadd32(#t~mem22!base, #t~mem22!offset)) [L1130] havoc #t~mem22; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8464bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND TRUE 8464bv32 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1323] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1325] COND TRUE 0bv32 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1330] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1335] ~got_new_session~0 := 1bv32; [L1336] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1337] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8496bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND TRUE 8496bv32 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1342] COND TRUE 1bv32 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1347] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1352] FCALL call #t~mem71 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem71=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1352-L1356] COND FALSE !(0bv32 != #t~mem71) [L1352] havoc #t~mem71; [L1355] FCALL call write~intINTTYPE4(8512bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1357] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8512bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND TRUE 8512bv32 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: ~bvadd32(836bv32, #t~mem72!offset) }, 4bv32); [L1361] FCALL call #t~mem74 := read~intINTTYPE4({ base: #t~mem73!base, offset: ~bvadd32(12bv32, #t~mem73!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem72!base=2147625026bv32, #t~mem72!offset=0bv32, #t~mem73!base=409153bv32, #t~mem73!offset=36bv32, #t~mem74=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1361-L1375] COND FALSE !(0bv32 != ~bvand32(256bv32, #t~mem74)) [L1361] havoc #t~mem74; [L1361] havoc #t~mem72; [L1361] havoc #t~mem73; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1365] COND TRUE 2bv32 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1370] COND FALSE !(~bvsle32(~ret~0, 0bv32)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1376] FCALL call write~intINTTYPE4(8528bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1377] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8512bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8528bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184] COND TRUE 8528bv32 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: ~bvadd32(836bv32, #t~mem76!offset) }, 4bv32); [L1381] FCALL call #t~mem78 := read~intINTTYPE4({ base: #t~mem77!base, offset: ~bvadd32(12bv32, #t~mem77!offset) }, 4bv32); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem76; [L1381] havoc #t~mem78; [L1381] havoc #t~mem77; [L1382] FCALL call #t~mem79 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(232bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem79=2101282bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1382-L1386] COND TRUE 0bv32 != ~bvand32(2097152bv32, #t~mem79) [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1383] FCALL call write~intINTTYPE4(1bv32, { base: #t~mem80!base, offset: ~bvadd32(871bv32, #t~mem80!offset) }, 4bv32); [L1383] havoc #t~mem80; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1387] FCALL call #t~mem83 := read~intINTTYPE4({ base: #t~mem82!base, offset: ~bvadd32(871bv32, #t~mem82!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem82!base=2147625026bv32, #t~mem82!offset=0bv32, #t~mem83=1bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1387-L1427] COND TRUE 0bv32 != #t~mem83 [L1387] havoc #t~mem83; [L1387] havoc #t~mem82; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=6bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1406] COND TRUE 6bv32 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1411] COND FALSE !(~bvsle32(~ret~0, 0bv32)) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1428] FCALL call write~intINTTYPE4(8544bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1429] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1685] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=2147625026bv32, #t~mem127!offset=0bv32, #t~mem128=1073741824bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1685] COND FALSE !(0bv32 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1714] ~skip~0 := 0bv32; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8528bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8544bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1190] COND TRUE 8544bv32 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433] FCALL call #t~mem93 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(180bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem93=1bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1433-L1475] COND TRUE 0bv32 != ~bvand32(1bv32, #t~mem93) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: ~bvadd32(148bv32, #t~mem94!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem94!base=2bv32, #t~mem94!offset=0bv32, #t~mem95!base=2147483648bv32, #t~mem95!offset=2147483648bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1434] COND FALSE !(0bv32 != ~bvadd32(#t~mem95!base, #t~mem95!offset)) [L1434] havoc #t~mem94; [L1434] havoc #t~mem95; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: ~bvadd32(836bv32, #t~mem98!offset) }, 4bv32); [L1444] FCALL call #t~mem100 := read~intINTTYPE4({ base: #t~mem99!base, offset: ~bvadd32(12bv32, #t~mem99!offset) }, 4bv32); VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem100=0bv32, #t~mem98!base=2147625026bv32, #t~mem98!offset=0bv32, #t~mem99!base=409153bv32, #t~mem99!offset=36bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1444-L1469] COND FALSE !(0bv32 != ~bvand32(256bv32, #t~mem100)) [L1444] havoc #t~mem100; [L1444] havoc #t~mem99; [L1444] havoc #t~mem98; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=1073741824bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1454] FCALL call write~intINTTYPE4(1bv32, { base: #t~mem103!base, offset: ~bvadd32(895bv32, #t~mem103!offset) }, 4bv32); [L1454] havoc #t~mem103; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1456] COND TRUE 7bv32 == ~blastFlag~0 VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1726] assert false; VAL [#in~s!base=409153bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1157675074bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=7bv32, ~cb~0!base=3bv32, ~cb~0!offset=0bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~l~0=0bv32, ~ret~0=0bv32, ~s!base=409153bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8544bv32, ~Time~0=0bv32, ~tmp___10~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=0bv32, ~tmp~3=0bv32] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1157675074:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) VAL [init=1, malloc(sizeof(SSL))={409153:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={-2147342270:0}, s={409153:0}, SSLv3_server_data={1157675074:0}] [L1074] CALL ssl3_accept(s) VAL [init=1, s={409153:0}, SSLv3_server_data={1157675074:0}] [L1080] BUF_MEM *buf ; [L1081] unsigned long l ; [L1082] unsigned long Time ; [L1083] unsigned long tmp ; [L1084] void (*cb)() ; [L1085] long num1 ; [L1086] int ret ; [L1087] int new_state ; [L1088] int state ; [L1089] int skip ; [L1090] int got_new_session ; [L1091] int tmp___1 = __VERIFIER_nondet_int() ; [L1092] int tmp___2 = __VERIFIER_nondet_int() ; [L1093] int tmp___3 = __VERIFIER_nondet_int() ; [L1094] int tmp___4 = __VERIFIER_nondet_int() ; [L1095] int tmp___5 = __VERIFIER_nondet_int() ; [L1096] int tmp___6 = __VERIFIER_nondet_int() ; [L1097] int tmp___7 ; [L1098] long tmp___8 = __VERIFIER_nondet_long() ; [L1099] int tmp___9 = __VERIFIER_nondet_int() ; [L1100] int tmp___10 = __VERIFIER_nondet_int() ; [L1101] int blastFlag ; [L1105] s->state = 8464 [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->info_callback={3:0}, skip=0, SSLv3_server_data={1157675074:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] EXPR s->cert VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1157675074:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={3:0}, blastFlag=1, got_new_session=0, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={3:0}, (s->s3)->tmp.reuse_message=1073741824, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1347] COND FALSE !(ret <= 0) [L1352] s->hit VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->hit=0, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1352] COND FALSE !(s->hit) [L1355] s->state = 8512 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1357] s->init_num = 0 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={3:0}, (s->s3)->tmp.reuse_message=1073741824, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND TRUE s->state == 8512 [L1361] EXPR s->s3 [L1361] EXPR (s->s3)->tmp.new_cipher [L1361] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={3:0}, ((s->s3)->tmp.new_cipher)->algorithms=0, (s->s3)->tmp.new_cipher={409153:36}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1361] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1364] ret = __VERIFIER_nondet_int() [L1365] COND TRUE blastFlag == 2 [L1366] blastFlag = 6 VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1370] COND FALSE !(ret <= 0) VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1376] s->state = 8528 [L1377] s->init_num = 0 VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={3:0}, (s->s3)->tmp.reuse_message=1073741824, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND TRUE s->state == 8528 [L1381] EXPR s->s3 [L1381] EXPR (s->s3)->tmp.new_cipher [L1381] EXPR ((s->s3)->tmp.new_cipher)->algorithms [L1381] l = ((s->s3)->tmp.new_cipher)->algorithms [L1382] EXPR s->options VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->options=2101282, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1382] COND TRUE s->options & 2097152UL [L1383] EXPR s->s3 [L1383] (s->s3)->tmp.use_rsa_tmp = 1 [L1387] EXPR s->s3 [L1387] (s->s3)->tmp.use_rsa_tmp VAL [={3:0}, (s->s3)->tmp.use_rsa_tmp=1, blastFlag=6, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1387] COND TRUE (s->s3)->tmp.use_rsa_tmp [L1405] ret = __VERIFIER_nondet_int() [L1406] COND TRUE blastFlag == 6 [L1407] blastFlag = 7 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1411] COND FALSE !(ret <= 0) VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1428] s->state = 8544 [L1429] s->init_num = 0 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={3:0}, (s->s3)->tmp.reuse_message=1073741824, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1190] COND TRUE s->state == 8544 [L1433] EXPR s->verify_mode VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->verify_mode=1, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1433] COND TRUE s->verify_mode & 1 [L1434] EXPR s->session [L1434] EXPR (s->session)->peer VAL [={3:0}, (s->session)->peer={-2147483648:-2147483648}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->session={2:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1434] COND FALSE !((unsigned long )(s->session)->peer != (unsigned long )((void *)0)) [L1444] EXPR s->s3 [L1444] EXPR (s->s3)->tmp.new_cipher [L1444] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={3:0}, ((s->s3)->tmp.new_cipher)->algorithms=0, (s->s3)->tmp.new_cipher={409153:36}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1444] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1454] EXPR s->s3 [L1454] (s->s3)->tmp.cert_request = 1 [L1455] ret = __VERIFIER_nondet_int() [L1456] COND TRUE blastFlag == 7 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=0, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1726] __VERIFIER_error() VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=0, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] ----- [2018-11-23 09:41:08,650 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_546b51f1-2cda-4375-b269-fb2c86fd89cb/bin-2019/uautomizer/witness.graphml [2018-11-23 09:41:08,651 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 09:41:08,651 INFO L168 Benchmark]: Toolchain (without parser) took 89946.96 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 301.5 MB). Free memory was 943.3 MB in the beginning and 851.5 MB in the end (delta: 91.8 MB). Peak memory consumption was 393.3 MB. Max. memory is 11.5 GB. [2018-11-23 09:41:08,652 INFO L168 Benchmark]: CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 09:41:08,652 INFO L168 Benchmark]: CACSL2BoogieTranslator took 529.80 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 170.9 MB). Free memory was 943.3 MB in the beginning and 1.1 GB in the end (delta: -204.5 MB). Peak memory consumption was 47.4 MB. Max. memory is 11.5 GB. [2018-11-23 09:41:08,653 INFO L168 Benchmark]: Boogie Procedure Inliner took 32.33 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2018-11-23 09:41:08,653 INFO L168 Benchmark]: Boogie Preprocessor took 65.23 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2018-11-23 09:41:08,653 INFO L168 Benchmark]: RCFGBuilder took 2537.35 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 86.0 MB). Peak memory consumption was 86.0 MB. Max. memory is 11.5 GB. [2018-11-23 09:41:08,654 INFO L168 Benchmark]: TraceAbstraction took 79728.80 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 130.5 MB). Free memory was 1.0 GB in the beginning and 930.5 MB in the end (delta: 117.7 MB). Peak memory consumption was 248.3 MB. Max. memory is 11.5 GB. [2018-11-23 09:41:08,654 INFO L168 Benchmark]: Witness Printer took 7050.26 ms. Allocated memory is still 1.3 GB. Free memory was 930.5 MB in the beginning and 851.5 MB in the end (delta: 79.0 MB). Peak memory consumption was 79.0 MB. Max. memory is 11.5 GB. [2018-11-23 09:41:08,655 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 529.80 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 170.9 MB). Free memory was 943.3 MB in the beginning and 1.1 GB in the end (delta: -204.5 MB). Peak memory consumption was 47.4 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 32.33 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 65.23 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * RCFGBuilder took 2537.35 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 86.0 MB). Peak memory consumption was 86.0 MB. Max. memory is 11.5 GB. * TraceAbstraction took 79728.80 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 130.5 MB). Free memory was 1.0 GB in the beginning and 930.5 MB in the end (delta: 117.7 MB). Peak memory consumption was 248.3 MB. Max. memory is 11.5 GB. * Witness Printer took 7050.26 ms. Allocated memory is still 1.3 GB. Free memory was 930.5 MB in the beginning and 851.5 MB in the end (delta: 79.0 MB). Peak memory consumption was 79.0 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 1726]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1157675074:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) VAL [init=1, malloc(sizeof(SSL))={409153:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={-2147342270:0}, s={409153:0}, SSLv3_server_data={1157675074:0}] [L1074] CALL ssl3_accept(s) VAL [init=1, s={409153:0}, SSLv3_server_data={1157675074:0}] [L1080] BUF_MEM *buf ; [L1081] unsigned long l ; [L1082] unsigned long Time ; [L1083] unsigned long tmp ; [L1084] void (*cb)() ; [L1085] long num1 ; [L1086] int ret ; [L1087] int new_state ; [L1088] int state ; [L1089] int skip ; [L1090] int got_new_session ; [L1091] int tmp___1 = __VERIFIER_nondet_int() ; [L1092] int tmp___2 = __VERIFIER_nondet_int() ; [L1093] int tmp___3 = __VERIFIER_nondet_int() ; [L1094] int tmp___4 = __VERIFIER_nondet_int() ; [L1095] int tmp___5 = __VERIFIER_nondet_int() ; [L1096] int tmp___6 = __VERIFIER_nondet_int() ; [L1097] int tmp___7 ; [L1098] long tmp___8 = __VERIFIER_nondet_long() ; [L1099] int tmp___9 = __VERIFIER_nondet_int() ; [L1100] int tmp___10 = __VERIFIER_nondet_int() ; [L1101] int blastFlag ; [L1105] s->state = 8464 [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->info_callback={3:0}, skip=0, SSLv3_server_data={1157675074:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] EXPR s->cert VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1157675074:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={409153:0}, s={409153:0}, s->state=8464, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={3:0}, blastFlag=1, got_new_session=0, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={3:0}, (s->s3)->tmp.reuse_message=1073741824, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={3:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8496, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1347] COND FALSE !(ret <= 0) [L1352] s->hit VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->hit=0, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1352] COND FALSE !(s->hit) [L1355] s->state = 8512 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1357] s->init_num = 0 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={3:0}, (s->s3)->tmp.reuse_message=1073741824, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={3:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8512, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND TRUE s->state == 8512 [L1361] EXPR s->s3 [L1361] EXPR (s->s3)->tmp.new_cipher [L1361] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={3:0}, ((s->s3)->tmp.new_cipher)->algorithms=0, (s->s3)->tmp.new_cipher={409153:36}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1361] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1364] ret = __VERIFIER_nondet_int() [L1365] COND TRUE blastFlag == 2 [L1366] blastFlag = 6 VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1370] COND FALSE !(ret <= 0) VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1376] s->state = 8528 [L1377] s->init_num = 0 VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={3:0}, (s->s3)->tmp.reuse_message=1073741824, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8528, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND TRUE s->state == 8528 [L1381] EXPR s->s3 [L1381] EXPR (s->s3)->tmp.new_cipher [L1381] EXPR ((s->s3)->tmp.new_cipher)->algorithms [L1381] l = ((s->s3)->tmp.new_cipher)->algorithms [L1382] EXPR s->options VAL [={3:0}, blastFlag=6, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->options=2101282, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1382] COND TRUE s->options & 2097152UL [L1383] EXPR s->s3 [L1383] (s->s3)->tmp.use_rsa_tmp = 1 [L1387] EXPR s->s3 [L1387] (s->s3)->tmp.use_rsa_tmp VAL [={3:0}, (s->s3)->tmp.use_rsa_tmp=1, blastFlag=6, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1387] COND TRUE (s->s3)->tmp.use_rsa_tmp [L1405] ret = __VERIFIER_nondet_int() [L1406] COND TRUE blastFlag == 6 [L1407] blastFlag = 7 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1411] COND FALSE !(ret <= 0) VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1428] s->state = 8544 [L1429] s->init_num = 0 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={3:0}, (s->s3)->tmp.reuse_message=1073741824, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->state=8544, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1190] COND TRUE s->state == 8544 [L1433] EXPR s->verify_mode VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->verify_mode=1, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1433] COND TRUE s->verify_mode & 1 [L1434] EXPR s->session [L1434] EXPR (s->session)->peer VAL [={3:0}, (s->session)->peer={-2147483648:-2147483648}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->session={2:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1434] COND FALSE !((unsigned long )(s->session)->peer != (unsigned long )((void *)0)) [L1444] EXPR s->s3 [L1444] EXPR (s->s3)->tmp.new_cipher [L1444] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={3:0}, ((s->s3)->tmp.new_cipher)->algorithms=0, (s->s3)->tmp.new_cipher={409153:36}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={409153:0}, s={409153:0}, s->s3={-2147342270:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1444] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1454] EXPR s->s3 [L1454] (s->s3)->tmp.cert_request = 1 [L1455] ret = __VERIFIER_nondet_int() [L1456] COND TRUE blastFlag == 7 VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=0, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1726] __VERIFIER_error() VAL [={3:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=0, s={409153:0}, s={409153:0}, skip=0, SSLv3_server_data={1157675074:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 159 locations, 1 error locations. UNSAFE Result, 79.6s OverallTime, 8 OverallIterations, 5 TraceHistogramMax, 60.8s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 2187 SDtfs, 1896 SDslu, 2340 SDs, 0 SdLazy, 1766 SolverSat, 193 SolverUnsat, 6 SolverUnknown, 0 SolverNotchecked, 59.0s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 669 GetRequests, 647 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1588occurred in iteration=7, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 7 MinimizatonAttempts, 1875 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.2s SsaConstructionTime, 7.8s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 803 NumberOfCodeBlocks, 803 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 663 ConstructedInterpolants, 1 QuantifiedInterpolants, 300203 SizeOfPredicates, 21 NumberOfNonLiveVariables, 2269 ConjunctsInSsa, 52 ConjunctsInUnsatCore, 7 InterpolantComputations, 7 PerfectInterpolantSequences, 534/534 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...