./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/list-simple/dll2n_update_all.i --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/list-simple/dll2n_update_all.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash fabf658906da38258bbb10e77b5550f740cea929 ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 18:05:38,163 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 18:05:38,166 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 18:05:38,186 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 18:05:38,186 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 18:05:38,189 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 18:05:38,191 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 18:05:38,203 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 18:05:38,205 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 18:05:38,207 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 18:05:38,209 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 18:05:38,211 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 18:05:38,212 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 18:05:38,216 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 18:05:38,217 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 18:05:38,219 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 18:05:38,221 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 18:05:38,223 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 18:05:38,226 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 18:05:38,231 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 18:05:38,236 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 18:05:38,238 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 18:05:38,239 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 18:05:38,240 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 18:05:38,243 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 18:05:38,243 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 18:05:38,243 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 18:05:38,244 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 18:05:38,245 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 18:05:38,246 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 18:05:38,246 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 18:05:38,247 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 18:05:38,248 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 18:05:38,249 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 18:05:38,250 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 18:05:38,250 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 18:05:38,251 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 18:05:38,251 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 18:05:38,252 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 18:05:38,253 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 18:05:38,254 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 18:05:38,254 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 18:05:38,269 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 18:05:38,270 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 18:05:38,271 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 18:05:38,272 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 18:05:38,272 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 18:05:38,272 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 18:05:38,272 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 18:05:38,273 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 18:05:38,273 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 18:05:38,273 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 18:05:38,274 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 18:05:38,274 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 18:05:38,274 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 18:05:38,275 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 18:05:38,275 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 18:05:38,275 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 18:05:38,276 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 18:05:38,276 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 18:05:38,276 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 18:05:38,277 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 18:05:38,277 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 18:05:38,277 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 18:05:38,277 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 18:05:38,278 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 18:05:38,278 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 18:05:38,278 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 18:05:38,279 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 18:05:38,279 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 18:05:38,279 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 18:05:38,279 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> fabf658906da38258bbb10e77b5550f740cea929 [2020-07-28 18:05:38,583 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 18:05:38,596 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 18:05:38,600 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 18:05:38,602 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 18:05:38,602 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 18:05:38,603 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/list-simple/dll2n_update_all.i [2020-07-28 18:05:38,677 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/80aeec995/f7dd125bad85460089a75f1e335d923e/FLAG38485b62b [2020-07-28 18:05:39,166 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 18:05:39,171 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/list-simple/dll2n_update_all.i [2020-07-28 18:05:39,187 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/80aeec995/f7dd125bad85460089a75f1e335d923e/FLAG38485b62b [2020-07-28 18:05:39,523 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/80aeec995/f7dd125bad85460089a75f1e335d923e [2020-07-28 18:05:39,526 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 18:05:39,529 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 18:05:39,530 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 18:05:39,530 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 18:05:39,534 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 18:05:39,536 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 06:05:39" (1/1) ... [2020-07-28 18:05:39,539 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2a968279 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:39, skipping insertion in model container [2020-07-28 18:05:39,540 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 06:05:39" (1/1) ... [2020-07-28 18:05:39,548 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 18:05:39,586 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 18:05:39,980 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 18:05:39,991 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 18:05:40,071 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 18:05:40,136 INFO L208 MainTranslator]: Completed translation [2020-07-28 18:05:40,138 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:40 WrapperNode [2020-07-28 18:05:40,138 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 18:05:40,140 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 18:05:40,140 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 18:05:40,140 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 18:05:40,150 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:40" (1/1) ... [2020-07-28 18:05:40,171 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:40" (1/1) ... [2020-07-28 18:05:40,205 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 18:05:40,206 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 18:05:40,206 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 18:05:40,206 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 18:05:40,215 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:40" (1/1) ... [2020-07-28 18:05:40,215 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:40" (1/1) ... [2020-07-28 18:05:40,219 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:40" (1/1) ... [2020-07-28 18:05:40,219 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:40" (1/1) ... [2020-07-28 18:05:40,230 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:40" (1/1) ... [2020-07-28 18:05:40,237 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:40" (1/1) ... [2020-07-28 18:05:40,239 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:40" (1/1) ... [2020-07-28 18:05:40,242 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 18:05:40,243 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 18:05:40,243 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 18:05:40,243 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 18:05:40,244 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:40" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 18:05:40,323 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2020-07-28 18:05:40,324 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2020-07-28 18:05:40,324 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2020-07-28 18:05:40,325 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2020-07-28 18:05:40,325 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2020-07-28 18:05:40,325 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2020-07-28 18:05:40,325 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 18:05:40,326 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 18:05:40,869 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 18:05:40,869 INFO L295 CfgBuilder]: Removed 20 assume(true) statements. [2020-07-28 18:05:40,873 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 06:05:40 BoogieIcfgContainer [2020-07-28 18:05:40,874 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 18:05:40,875 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 18:05:40,876 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 18:05:40,879 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 18:05:40,880 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 06:05:39" (1/3) ... [2020-07-28 18:05:40,881 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7cd74fed and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 06:05:40, skipping insertion in model container [2020-07-28 18:05:40,881 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:05:40" (2/3) ... [2020-07-28 18:05:40,882 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7cd74fed and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 06:05:40, skipping insertion in model container [2020-07-28 18:05:40,882 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 06:05:40" (3/3) ... [2020-07-28 18:05:40,884 INFO L109 eAbstractionObserver]: Analyzing ICFG dll2n_update_all.i [2020-07-28 18:05:40,895 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 18:05:40,907 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2020-07-28 18:05:40,938 INFO L251 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2020-07-28 18:05:40,971 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 18:05:40,972 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 18:05:40,972 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 18:05:40,972 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 18:05:40,973 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 18:05:40,973 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 18:05:40,974 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 18:05:40,974 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 18:05:40,994 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states. [2020-07-28 18:05:41,001 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2020-07-28 18:05:41,002 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:05:41,003 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:05:41,004 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:05:41,009 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:05:41,010 INFO L82 PathProgramCache]: Analyzing trace with hash -1608020802, now seen corresponding path program 1 times [2020-07-28 18:05:41,021 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:05:41,022 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [416531485] [2020-07-28 18:05:41,022 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:05:41,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:41,245 INFO L280 TraceCheckUtils]: 0: Hoare triple {32#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {32#true} is VALID [2020-07-28 18:05:41,247 INFO L280 TraceCheckUtils]: 1: Hoare triple {32#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {34#(= 2 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:41,248 INFO L280 TraceCheckUtils]: 2: Hoare triple {34#(= 2 ULTIMATE.start_dll_create_~len)} assume !(dll_create_~len > 0); {33#false} is VALID [2020-07-28 18:05:41,248 INFO L280 TraceCheckUtils]: 3: Hoare triple {33#false} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {33#false} is VALID [2020-07-28 18:05:41,249 INFO L280 TraceCheckUtils]: 4: Hoare triple {33#false} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {33#false} is VALID [2020-07-28 18:05:41,249 INFO L280 TraceCheckUtils]: 5: Hoare triple {33#false} assume !(main_~i~0 < main_~len~0); {33#false} is VALID [2020-07-28 18:05:41,250 INFO L280 TraceCheckUtils]: 6: Hoare triple {33#false} main_~i~0 := 0; {33#false} is VALID [2020-07-28 18:05:41,250 INFO L280 TraceCheckUtils]: 7: Hoare triple {33#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {33#false} is VALID [2020-07-28 18:05:41,250 INFO L280 TraceCheckUtils]: 8: Hoare triple {33#false} assume !(dll_get_data_at_~index > 0); {33#false} is VALID [2020-07-28 18:05:41,251 INFO L280 TraceCheckUtils]: 9: Hoare triple {33#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {33#false} is VALID [2020-07-28 18:05:41,251 INFO L280 TraceCheckUtils]: 10: Hoare triple {33#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {33#false} is VALID [2020-07-28 18:05:41,252 INFO L280 TraceCheckUtils]: 11: Hoare triple {33#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {33#false} is VALID [2020-07-28 18:05:41,252 INFO L280 TraceCheckUtils]: 12: Hoare triple {33#false} assume !false; {33#false} is VALID [2020-07-28 18:05:41,255 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:05:41,256 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [416531485] [2020-07-28 18:05:41,257 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:05:41,258 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 18:05:41,259 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [614888215] [2020-07-28 18:05:41,265 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 13 [2020-07-28 18:05:41,267 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:05:41,270 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 18:05:41,303 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 13 edges. 13 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:41,303 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 18:05:41,304 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:05:41,313 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 18:05:41,314 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:05:41,316 INFO L87 Difference]: Start difference. First operand 29 states. Second operand 3 states. [2020-07-28 18:05:41,456 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:41,457 INFO L93 Difference]: Finished difference Result 56 states and 84 transitions. [2020-07-28 18:05:41,457 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 18:05:41,457 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 13 [2020-07-28 18:05:41,458 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:05:41,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:05:41,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 84 transitions. [2020-07-28 18:05:41,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:05:41,473 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 84 transitions. [2020-07-28 18:05:41,474 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 84 transitions. [2020-07-28 18:05:41,604 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:41,615 INFO L225 Difference]: With dead ends: 56 [2020-07-28 18:05:41,616 INFO L226 Difference]: Without dead ends: 27 [2020-07-28 18:05:41,619 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:05:41,638 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27 states. [2020-07-28 18:05:41,658 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27 to 23. [2020-07-28 18:05:41,659 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:05:41,659 INFO L82 GeneralOperation]: Start isEquivalent. First operand 27 states. Second operand 23 states. [2020-07-28 18:05:41,660 INFO L74 IsIncluded]: Start isIncluded. First operand 27 states. Second operand 23 states. [2020-07-28 18:05:41,660 INFO L87 Difference]: Start difference. First operand 27 states. Second operand 23 states. [2020-07-28 18:05:41,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:41,664 INFO L93 Difference]: Finished difference Result 27 states and 33 transitions. [2020-07-28 18:05:41,664 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 33 transitions. [2020-07-28 18:05:41,665 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:41,665 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:41,665 INFO L74 IsIncluded]: Start isIncluded. First operand 23 states. Second operand 27 states. [2020-07-28 18:05:41,666 INFO L87 Difference]: Start difference. First operand 23 states. Second operand 27 states. [2020-07-28 18:05:41,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:41,669 INFO L93 Difference]: Finished difference Result 27 states and 33 transitions. [2020-07-28 18:05:41,669 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 33 transitions. [2020-07-28 18:05:41,670 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:41,670 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:41,670 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:05:41,670 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:05:41,671 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 23 states. [2020-07-28 18:05:41,673 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 28 transitions. [2020-07-28 18:05:41,674 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 28 transitions. Word has length 13 [2020-07-28 18:05:41,675 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:05:41,675 INFO L479 AbstractCegarLoop]: Abstraction has 23 states and 28 transitions. [2020-07-28 18:05:41,675 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 18:05:41,675 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 28 transitions. [2020-07-28 18:05:41,676 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 18:05:41,676 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:05:41,676 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:05:41,677 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 18:05:41,677 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:05:41,677 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:05:41,677 INFO L82 PathProgramCache]: Analyzing trace with hash -780239213, now seen corresponding path program 1 times [2020-07-28 18:05:41,678 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:05:41,678 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1424598138] [2020-07-28 18:05:41,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:05:41,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:41,757 INFO L280 TraceCheckUtils]: 0: Hoare triple {201#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {201#true} is VALID [2020-07-28 18:05:41,758 INFO L280 TraceCheckUtils]: 1: Hoare triple {201#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {203#(and (= ULTIMATE.start_dll_create_~head~0.base 0) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} is VALID [2020-07-28 18:05:41,760 INFO L280 TraceCheckUtils]: 2: Hoare triple {203#(and (= ULTIMATE.start_dll_create_~head~0.base 0) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {203#(and (= ULTIMATE.start_dll_create_~head~0.base 0) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} is VALID [2020-07-28 18:05:41,761 INFO L280 TraceCheckUtils]: 3: Hoare triple {203#(and (= ULTIMATE.start_dll_create_~head~0.base 0) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {203#(and (= ULTIMATE.start_dll_create_~head~0.base 0) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} is VALID [2020-07-28 18:05:41,763 INFO L280 TraceCheckUtils]: 4: Hoare triple {203#(and (= ULTIMATE.start_dll_create_~head~0.base 0) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {203#(and (= ULTIMATE.start_dll_create_~head~0.base 0) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} is VALID [2020-07-28 18:05:41,765 INFO L280 TraceCheckUtils]: 5: Hoare triple {203#(and (= ULTIMATE.start_dll_create_~head~0.base 0) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {202#false} is VALID [2020-07-28 18:05:41,765 INFO L280 TraceCheckUtils]: 6: Hoare triple {202#false} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {202#false} is VALID [2020-07-28 18:05:41,766 INFO L280 TraceCheckUtils]: 7: Hoare triple {202#false} assume !(dll_create_~len > 0); {202#false} is VALID [2020-07-28 18:05:41,766 INFO L280 TraceCheckUtils]: 8: Hoare triple {202#false} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {202#false} is VALID [2020-07-28 18:05:41,766 INFO L280 TraceCheckUtils]: 9: Hoare triple {202#false} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {202#false} is VALID [2020-07-28 18:05:41,767 INFO L280 TraceCheckUtils]: 10: Hoare triple {202#false} assume !(main_~i~0 < main_~len~0); {202#false} is VALID [2020-07-28 18:05:41,767 INFO L280 TraceCheckUtils]: 11: Hoare triple {202#false} main_~i~0 := 0; {202#false} is VALID [2020-07-28 18:05:41,768 INFO L280 TraceCheckUtils]: 12: Hoare triple {202#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {202#false} is VALID [2020-07-28 18:05:41,768 INFO L280 TraceCheckUtils]: 13: Hoare triple {202#false} assume !(dll_get_data_at_~index > 0); {202#false} is VALID [2020-07-28 18:05:41,768 INFO L280 TraceCheckUtils]: 14: Hoare triple {202#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {202#false} is VALID [2020-07-28 18:05:41,769 INFO L280 TraceCheckUtils]: 15: Hoare triple {202#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {202#false} is VALID [2020-07-28 18:05:41,769 INFO L280 TraceCheckUtils]: 16: Hoare triple {202#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {202#false} is VALID [2020-07-28 18:05:41,770 INFO L280 TraceCheckUtils]: 17: Hoare triple {202#false} assume !false; {202#false} is VALID [2020-07-28 18:05:41,773 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:05:41,777 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1424598138] [2020-07-28 18:05:41,778 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:05:41,778 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 18:05:41,779 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1745476120] [2020-07-28 18:05:41,781 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 18 [2020-07-28 18:05:41,781 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:05:41,781 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 18:05:41,817 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:41,817 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 18:05:41,818 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:05:41,818 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 18:05:41,818 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:05:41,819 INFO L87 Difference]: Start difference. First operand 23 states and 28 transitions. Second operand 3 states. [2020-07-28 18:05:41,920 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:41,921 INFO L93 Difference]: Finished difference Result 47 states and 58 transitions. [2020-07-28 18:05:41,922 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 18:05:41,922 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 18 [2020-07-28 18:05:41,922 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:05:41,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:05:41,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 58 transitions. [2020-07-28 18:05:41,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:05:41,930 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 58 transitions. [2020-07-28 18:05:41,931 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 58 transitions. [2020-07-28 18:05:42,015 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:42,016 INFO L225 Difference]: With dead ends: 47 [2020-07-28 18:05:42,017 INFO L226 Difference]: Without dead ends: 27 [2020-07-28 18:05:42,019 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:05:42,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27 states. [2020-07-28 18:05:42,035 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27 to 26. [2020-07-28 18:05:42,035 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:05:42,036 INFO L82 GeneralOperation]: Start isEquivalent. First operand 27 states. Second operand 26 states. [2020-07-28 18:05:42,036 INFO L74 IsIncluded]: Start isIncluded. First operand 27 states. Second operand 26 states. [2020-07-28 18:05:42,037 INFO L87 Difference]: Start difference. First operand 27 states. Second operand 26 states. [2020-07-28 18:05:42,040 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:42,040 INFO L93 Difference]: Finished difference Result 27 states and 32 transitions. [2020-07-28 18:05:42,040 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 32 transitions. [2020-07-28 18:05:42,041 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:42,041 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:42,041 INFO L74 IsIncluded]: Start isIncluded. First operand 26 states. Second operand 27 states. [2020-07-28 18:05:42,043 INFO L87 Difference]: Start difference. First operand 26 states. Second operand 27 states. [2020-07-28 18:05:42,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:42,050 INFO L93 Difference]: Finished difference Result 27 states and 32 transitions. [2020-07-28 18:05:42,050 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 32 transitions. [2020-07-28 18:05:42,051 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:42,051 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:42,052 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:05:42,052 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:05:42,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 26 states. [2020-07-28 18:05:42,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 31 transitions. [2020-07-28 18:05:42,064 INFO L78 Accepts]: Start accepts. Automaton has 26 states and 31 transitions. Word has length 18 [2020-07-28 18:05:42,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:05:42,065 INFO L479 AbstractCegarLoop]: Abstraction has 26 states and 31 transitions. [2020-07-28 18:05:42,066 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 18:05:42,066 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 31 transitions. [2020-07-28 18:05:42,067 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 18:05:42,067 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:05:42,068 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:05:42,068 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 18:05:42,069 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:05:42,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:05:42,070 INFO L82 PathProgramCache]: Analyzing trace with hash -1367045227, now seen corresponding path program 1 times [2020-07-28 18:05:42,071 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:05:42,072 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1305454089] [2020-07-28 18:05:42,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:05:42,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:42,195 INFO L280 TraceCheckUtils]: 0: Hoare triple {359#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {359#true} is VALID [2020-07-28 18:05:42,196 INFO L280 TraceCheckUtils]: 1: Hoare triple {359#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {361#(= 2 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:42,197 INFO L280 TraceCheckUtils]: 2: Hoare triple {361#(= 2 ULTIMATE.start_dll_create_~len)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {361#(= 2 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:42,197 INFO L280 TraceCheckUtils]: 3: Hoare triple {361#(= 2 ULTIMATE.start_dll_create_~len)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {361#(= 2 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:42,198 INFO L280 TraceCheckUtils]: 4: Hoare triple {361#(= 2 ULTIMATE.start_dll_create_~len)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {361#(= 2 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:42,199 INFO L280 TraceCheckUtils]: 5: Hoare triple {361#(= 2 ULTIMATE.start_dll_create_~len)} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {361#(= 2 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:42,200 INFO L280 TraceCheckUtils]: 6: Hoare triple {361#(= 2 ULTIMATE.start_dll_create_~len)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {362#(<= 1 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:42,201 INFO L280 TraceCheckUtils]: 7: Hoare triple {362#(<= 1 ULTIMATE.start_dll_create_~len)} assume !(dll_create_~len > 0); {360#false} is VALID [2020-07-28 18:05:42,201 INFO L280 TraceCheckUtils]: 8: Hoare triple {360#false} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {360#false} is VALID [2020-07-28 18:05:42,202 INFO L280 TraceCheckUtils]: 9: Hoare triple {360#false} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {360#false} is VALID [2020-07-28 18:05:42,202 INFO L280 TraceCheckUtils]: 10: Hoare triple {360#false} assume !(main_~i~0 < main_~len~0); {360#false} is VALID [2020-07-28 18:05:42,202 INFO L280 TraceCheckUtils]: 11: Hoare triple {360#false} main_~i~0 := 0; {360#false} is VALID [2020-07-28 18:05:42,203 INFO L280 TraceCheckUtils]: 12: Hoare triple {360#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {360#false} is VALID [2020-07-28 18:05:42,203 INFO L280 TraceCheckUtils]: 13: Hoare triple {360#false} assume !(dll_get_data_at_~index > 0); {360#false} is VALID [2020-07-28 18:05:42,203 INFO L280 TraceCheckUtils]: 14: Hoare triple {360#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {360#false} is VALID [2020-07-28 18:05:42,203 INFO L280 TraceCheckUtils]: 15: Hoare triple {360#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {360#false} is VALID [2020-07-28 18:05:42,204 INFO L280 TraceCheckUtils]: 16: Hoare triple {360#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {360#false} is VALID [2020-07-28 18:05:42,204 INFO L280 TraceCheckUtils]: 17: Hoare triple {360#false} assume !false; {360#false} is VALID [2020-07-28 18:05:42,205 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:05:42,206 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1305454089] [2020-07-28 18:05:42,206 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [954578768] [2020-07-28 18:05:42,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:05:42,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:42,288 INFO L263 TraceCheckSpWp]: Trace formula consists of 92 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-28 18:05:42,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:42,306 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 18:05:42,473 INFO L280 TraceCheckUtils]: 0: Hoare triple {359#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {359#true} is VALID [2020-07-28 18:05:42,475 INFO L280 TraceCheckUtils]: 1: Hoare triple {359#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {369#(<= 2 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:42,475 INFO L280 TraceCheckUtils]: 2: Hoare triple {369#(<= 2 ULTIMATE.start_dll_create_~len)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {369#(<= 2 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:42,476 INFO L280 TraceCheckUtils]: 3: Hoare triple {369#(<= 2 ULTIMATE.start_dll_create_~len)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {369#(<= 2 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:42,477 INFO L280 TraceCheckUtils]: 4: Hoare triple {369#(<= 2 ULTIMATE.start_dll_create_~len)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {369#(<= 2 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:42,478 INFO L280 TraceCheckUtils]: 5: Hoare triple {369#(<= 2 ULTIMATE.start_dll_create_~len)} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {369#(<= 2 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:42,479 INFO L280 TraceCheckUtils]: 6: Hoare triple {369#(<= 2 ULTIMATE.start_dll_create_~len)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {362#(<= 1 ULTIMATE.start_dll_create_~len)} is VALID [2020-07-28 18:05:42,480 INFO L280 TraceCheckUtils]: 7: Hoare triple {362#(<= 1 ULTIMATE.start_dll_create_~len)} assume !(dll_create_~len > 0); {360#false} is VALID [2020-07-28 18:05:42,480 INFO L280 TraceCheckUtils]: 8: Hoare triple {360#false} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {360#false} is VALID [2020-07-28 18:05:42,481 INFO L280 TraceCheckUtils]: 9: Hoare triple {360#false} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {360#false} is VALID [2020-07-28 18:05:42,481 INFO L280 TraceCheckUtils]: 10: Hoare triple {360#false} assume !(main_~i~0 < main_~len~0); {360#false} is VALID [2020-07-28 18:05:42,481 INFO L280 TraceCheckUtils]: 11: Hoare triple {360#false} main_~i~0 := 0; {360#false} is VALID [2020-07-28 18:05:42,482 INFO L280 TraceCheckUtils]: 12: Hoare triple {360#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {360#false} is VALID [2020-07-28 18:05:42,482 INFO L280 TraceCheckUtils]: 13: Hoare triple {360#false} assume !(dll_get_data_at_~index > 0); {360#false} is VALID [2020-07-28 18:05:42,482 INFO L280 TraceCheckUtils]: 14: Hoare triple {360#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {360#false} is VALID [2020-07-28 18:05:42,483 INFO L280 TraceCheckUtils]: 15: Hoare triple {360#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {360#false} is VALID [2020-07-28 18:05:42,483 INFO L280 TraceCheckUtils]: 16: Hoare triple {360#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {360#false} is VALID [2020-07-28 18:05:42,483 INFO L280 TraceCheckUtils]: 17: Hoare triple {360#false} assume !false; {360#false} is VALID [2020-07-28 18:05:42,484 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:05:42,485 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 18:05:42,485 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4] total 5 [2020-07-28 18:05:42,485 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1797824434] [2020-07-28 18:05:42,486 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 18 [2020-07-28 18:05:42,486 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:05:42,487 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 18:05:42,524 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:42,524 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 18:05:42,524 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:05:42,525 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 18:05:42,525 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:05:42,526 INFO L87 Difference]: Start difference. First operand 26 states and 31 transitions. Second operand 5 states. [2020-07-28 18:05:42,640 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:42,641 INFO L93 Difference]: Finished difference Result 43 states and 52 transitions. [2020-07-28 18:05:42,641 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 18:05:42,641 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 18 [2020-07-28 18:05:42,641 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:05:42,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:05:42,643 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 52 transitions. [2020-07-28 18:05:42,643 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:05:42,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 52 transitions. [2020-07-28 18:05:42,645 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 52 transitions. [2020-07-28 18:05:42,719 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:42,721 INFO L225 Difference]: With dead ends: 43 [2020-07-28 18:05:42,721 INFO L226 Difference]: Without dead ends: 28 [2020-07-28 18:05:42,721 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:05:42,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28 states. [2020-07-28 18:05:42,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28 to 28. [2020-07-28 18:05:42,733 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:05:42,733 INFO L82 GeneralOperation]: Start isEquivalent. First operand 28 states. Second operand 28 states. [2020-07-28 18:05:42,734 INFO L74 IsIncluded]: Start isIncluded. First operand 28 states. Second operand 28 states. [2020-07-28 18:05:42,734 INFO L87 Difference]: Start difference. First operand 28 states. Second operand 28 states. [2020-07-28 18:05:42,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:42,736 INFO L93 Difference]: Finished difference Result 28 states and 33 transitions. [2020-07-28 18:05:42,737 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 33 transitions. [2020-07-28 18:05:42,737 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:42,737 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:42,738 INFO L74 IsIncluded]: Start isIncluded. First operand 28 states. Second operand 28 states. [2020-07-28 18:05:42,738 INFO L87 Difference]: Start difference. First operand 28 states. Second operand 28 states. [2020-07-28 18:05:42,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:42,740 INFO L93 Difference]: Finished difference Result 28 states and 33 transitions. [2020-07-28 18:05:42,741 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 33 transitions. [2020-07-28 18:05:42,741 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:42,742 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:42,742 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:05:42,742 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:05:42,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 28 states. [2020-07-28 18:05:42,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 33 transitions. [2020-07-28 18:05:42,744 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 33 transitions. Word has length 18 [2020-07-28 18:05:42,745 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:05:42,745 INFO L479 AbstractCegarLoop]: Abstraction has 28 states and 33 transitions. [2020-07-28 18:05:42,745 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 18:05:42,745 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 33 transitions. [2020-07-28 18:05:42,746 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2020-07-28 18:05:42,746 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:05:42,747 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:05:42,963 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable2 [2020-07-28 18:05:42,963 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:05:42,963 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:05:42,963 INFO L82 PathProgramCache]: Analyzing trace with hash 980561436, now seen corresponding path program 1 times [2020-07-28 18:05:42,964 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:05:42,964 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [574209432] [2020-07-28 18:05:42,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:05:43,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:43,121 INFO L280 TraceCheckUtils]: 0: Hoare triple {571#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {571#true} is VALID [2020-07-28 18:05:43,122 INFO L280 TraceCheckUtils]: 1: Hoare triple {571#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,123 INFO L280 TraceCheckUtils]: 2: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,124 INFO L280 TraceCheckUtils]: 3: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,124 INFO L280 TraceCheckUtils]: 4: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,125 INFO L280 TraceCheckUtils]: 5: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,126 INFO L280 TraceCheckUtils]: 6: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,127 INFO L280 TraceCheckUtils]: 7: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,128 INFO L280 TraceCheckUtils]: 8: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,128 INFO L280 TraceCheckUtils]: 9: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,129 INFO L280 TraceCheckUtils]: 10: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,130 INFO L280 TraceCheckUtils]: 11: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,131 INFO L280 TraceCheckUtils]: 12: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} assume !(dll_create_~len > 0); {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,132 INFO L280 TraceCheckUtils]: 13: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {573#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,133 INFO L280 TraceCheckUtils]: 14: Hoare triple {573#(<= 2 ULTIMATE.start_main_~len~0)} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {574#(and (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:05:43,134 INFO L280 TraceCheckUtils]: 15: Hoare triple {574#(and (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} assume !(main_~i~0 < main_~len~0); {572#false} is VALID [2020-07-28 18:05:43,134 INFO L280 TraceCheckUtils]: 16: Hoare triple {572#false} main_~i~0 := 0; {572#false} is VALID [2020-07-28 18:05:43,134 INFO L280 TraceCheckUtils]: 17: Hoare triple {572#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {572#false} is VALID [2020-07-28 18:05:43,135 INFO L280 TraceCheckUtils]: 18: Hoare triple {572#false} assume !(dll_get_data_at_~index > 0); {572#false} is VALID [2020-07-28 18:05:43,135 INFO L280 TraceCheckUtils]: 19: Hoare triple {572#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {572#false} is VALID [2020-07-28 18:05:43,135 INFO L280 TraceCheckUtils]: 20: Hoare triple {572#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {572#false} is VALID [2020-07-28 18:05:43,135 INFO L280 TraceCheckUtils]: 21: Hoare triple {572#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {572#false} is VALID [2020-07-28 18:05:43,136 INFO L280 TraceCheckUtils]: 22: Hoare triple {572#false} assume !false; {572#false} is VALID [2020-07-28 18:05:43,137 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2020-07-28 18:05:43,138 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [574209432] [2020-07-28 18:05:43,138 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:05:43,138 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 18:05:43,138 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1771264553] [2020-07-28 18:05:43,139 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 23 [2020-07-28 18:05:43,140 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:05:43,140 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 18:05:43,165 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:43,166 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 18:05:43,166 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:05:43,166 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 18:05:43,166 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2020-07-28 18:05:43,167 INFO L87 Difference]: Start difference. First operand 28 states and 33 transitions. Second operand 4 states. [2020-07-28 18:05:43,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:43,294 INFO L93 Difference]: Finished difference Result 49 states and 58 transitions. [2020-07-28 18:05:43,294 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 18:05:43,295 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 23 [2020-07-28 18:05:43,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:05:43,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 18:05:43,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 52 transitions. [2020-07-28 18:05:43,298 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 18:05:43,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 52 transitions. [2020-07-28 18:05:43,300 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 52 transitions. [2020-07-28 18:05:43,373 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:43,376 INFO L225 Difference]: With dead ends: 49 [2020-07-28 18:05:43,376 INFO L226 Difference]: Without dead ends: 40 [2020-07-28 18:05:43,377 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2020-07-28 18:05:43,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2020-07-28 18:05:43,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 29. [2020-07-28 18:05:43,400 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:05:43,400 INFO L82 GeneralOperation]: Start isEquivalent. First operand 40 states. Second operand 29 states. [2020-07-28 18:05:43,400 INFO L74 IsIncluded]: Start isIncluded. First operand 40 states. Second operand 29 states. [2020-07-28 18:05:43,401 INFO L87 Difference]: Start difference. First operand 40 states. Second operand 29 states. [2020-07-28 18:05:43,403 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:43,403 INFO L93 Difference]: Finished difference Result 40 states and 47 transitions. [2020-07-28 18:05:43,404 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 47 transitions. [2020-07-28 18:05:43,404 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:43,405 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:43,405 INFO L74 IsIncluded]: Start isIncluded. First operand 29 states. Second operand 40 states. [2020-07-28 18:05:43,405 INFO L87 Difference]: Start difference. First operand 29 states. Second operand 40 states. [2020-07-28 18:05:43,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:43,408 INFO L93 Difference]: Finished difference Result 40 states and 47 transitions. [2020-07-28 18:05:43,408 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 47 transitions. [2020-07-28 18:05:43,409 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:43,409 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:43,409 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:05:43,409 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:05:43,410 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 29 states. [2020-07-28 18:05:43,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 34 transitions. [2020-07-28 18:05:43,412 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 34 transitions. Word has length 23 [2020-07-28 18:05:43,412 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:05:43,412 INFO L479 AbstractCegarLoop]: Abstraction has 29 states and 34 transitions. [2020-07-28 18:05:43,412 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 18:05:43,413 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 34 transitions. [2020-07-28 18:05:43,414 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2020-07-28 18:05:43,414 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:05:43,414 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:05:43,414 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 18:05:43,415 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:05:43,415 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:05:43,415 INFO L82 PathProgramCache]: Analyzing trace with hash 363329286, now seen corresponding path program 1 times [2020-07-28 18:05:43,416 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:05:43,416 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [108509684] [2020-07-28 18:05:43,417 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:05:43,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:43,530 INFO L280 TraceCheckUtils]: 0: Hoare triple {766#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {766#true} is VALID [2020-07-28 18:05:43,531 INFO L280 TraceCheckUtils]: 1: Hoare triple {766#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,532 INFO L280 TraceCheckUtils]: 2: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,533 INFO L280 TraceCheckUtils]: 3: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,534 INFO L280 TraceCheckUtils]: 4: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,535 INFO L280 TraceCheckUtils]: 5: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,535 INFO L280 TraceCheckUtils]: 6: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,536 INFO L280 TraceCheckUtils]: 7: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,537 INFO L280 TraceCheckUtils]: 8: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,538 INFO L280 TraceCheckUtils]: 9: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,539 INFO L280 TraceCheckUtils]: 10: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,539 INFO L280 TraceCheckUtils]: 11: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,540 INFO L280 TraceCheckUtils]: 12: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume !(dll_create_~len > 0); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,541 INFO L280 TraceCheckUtils]: 13: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,542 INFO L280 TraceCheckUtils]: 14: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {769#(and (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:05:43,543 INFO L280 TraceCheckUtils]: 15: Hoare triple {769#(and (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {769#(and (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:05:43,544 INFO L280 TraceCheckUtils]: 16: Hoare triple {769#(and (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} assume !(dll_update_at_~index > 0); {769#(and (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:05:43,546 INFO L280 TraceCheckUtils]: 17: Hoare triple {769#(and (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {769#(and (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:05:43,547 INFO L280 TraceCheckUtils]: 18: Hoare triple {769#(and (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {770#(<= (+ ULTIMATE.start_main_~i~0 1) ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,548 INFO L280 TraceCheckUtils]: 19: Hoare triple {770#(<= (+ ULTIMATE.start_main_~i~0 1) ULTIMATE.start_main_~len~0)} assume !(main_~i~0 < main_~len~0); {767#false} is VALID [2020-07-28 18:05:43,548 INFO L280 TraceCheckUtils]: 20: Hoare triple {767#false} main_~i~0 := 0; {767#false} is VALID [2020-07-28 18:05:43,548 INFO L280 TraceCheckUtils]: 21: Hoare triple {767#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {767#false} is VALID [2020-07-28 18:05:43,549 INFO L280 TraceCheckUtils]: 22: Hoare triple {767#false} assume !(dll_get_data_at_~index > 0); {767#false} is VALID [2020-07-28 18:05:43,549 INFO L280 TraceCheckUtils]: 23: Hoare triple {767#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {767#false} is VALID [2020-07-28 18:05:43,549 INFO L280 TraceCheckUtils]: 24: Hoare triple {767#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {767#false} is VALID [2020-07-28 18:05:43,550 INFO L280 TraceCheckUtils]: 25: Hoare triple {767#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {767#false} is VALID [2020-07-28 18:05:43,550 INFO L280 TraceCheckUtils]: 26: Hoare triple {767#false} assume !false; {767#false} is VALID [2020-07-28 18:05:43,552 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2020-07-28 18:05:43,553 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [108509684] [2020-07-28 18:05:43,553 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1711537273] [2020-07-28 18:05:43,553 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:05:43,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:43,644 INFO L263 TraceCheckSpWp]: Trace formula consists of 147 conjuncts, 4 conjunts are in the unsatisfiable core [2020-07-28 18:05:43,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:43,657 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 18:05:43,771 INFO L280 TraceCheckUtils]: 0: Hoare triple {766#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {766#true} is VALID [2020-07-28 18:05:43,773 INFO L280 TraceCheckUtils]: 1: Hoare triple {766#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,773 INFO L280 TraceCheckUtils]: 2: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,774 INFO L280 TraceCheckUtils]: 3: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,775 INFO L280 TraceCheckUtils]: 4: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,776 INFO L280 TraceCheckUtils]: 5: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,776 INFO L280 TraceCheckUtils]: 6: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,777 INFO L280 TraceCheckUtils]: 7: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,778 INFO L280 TraceCheckUtils]: 8: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,779 INFO L280 TraceCheckUtils]: 9: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,779 INFO L280 TraceCheckUtils]: 10: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,780 INFO L280 TraceCheckUtils]: 11: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,781 INFO L280 TraceCheckUtils]: 12: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} assume !(dll_create_~len > 0); {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,781 INFO L280 TraceCheckUtils]: 13: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {768#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:43,782 INFO L280 TraceCheckUtils]: 14: Hoare triple {768#(<= 2 ULTIMATE.start_main_~len~0)} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {816#(and (<= ULTIMATE.start_main_~i~0 0) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:05:43,784 INFO L280 TraceCheckUtils]: 15: Hoare triple {816#(and (<= ULTIMATE.start_main_~i~0 0) (<= 2 ULTIMATE.start_main_~len~0))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {816#(and (<= ULTIMATE.start_main_~i~0 0) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:05:43,785 INFO L280 TraceCheckUtils]: 16: Hoare triple {816#(and (<= ULTIMATE.start_main_~i~0 0) (<= 2 ULTIMATE.start_main_~len~0))} assume !(dll_update_at_~index > 0); {816#(and (<= ULTIMATE.start_main_~i~0 0) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:05:43,786 INFO L280 TraceCheckUtils]: 17: Hoare triple {816#(and (<= ULTIMATE.start_main_~i~0 0) (<= 2 ULTIMATE.start_main_~len~0))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {816#(and (<= ULTIMATE.start_main_~i~0 0) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:05:43,787 INFO L280 TraceCheckUtils]: 18: Hoare triple {816#(and (<= ULTIMATE.start_main_~i~0 0) (<= 2 ULTIMATE.start_main_~len~0))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {829#(and (<= 2 ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~i~0 1))} is VALID [2020-07-28 18:05:43,788 INFO L280 TraceCheckUtils]: 19: Hoare triple {829#(and (<= 2 ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~i~0 1))} assume !(main_~i~0 < main_~len~0); {767#false} is VALID [2020-07-28 18:05:43,788 INFO L280 TraceCheckUtils]: 20: Hoare triple {767#false} main_~i~0 := 0; {767#false} is VALID [2020-07-28 18:05:43,788 INFO L280 TraceCheckUtils]: 21: Hoare triple {767#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {767#false} is VALID [2020-07-28 18:05:43,789 INFO L280 TraceCheckUtils]: 22: Hoare triple {767#false} assume !(dll_get_data_at_~index > 0); {767#false} is VALID [2020-07-28 18:05:43,789 INFO L280 TraceCheckUtils]: 23: Hoare triple {767#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {767#false} is VALID [2020-07-28 18:05:43,789 INFO L280 TraceCheckUtils]: 24: Hoare triple {767#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {767#false} is VALID [2020-07-28 18:05:43,789 INFO L280 TraceCheckUtils]: 25: Hoare triple {767#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {767#false} is VALID [2020-07-28 18:05:43,790 INFO L280 TraceCheckUtils]: 26: Hoare triple {767#false} assume !false; {767#false} is VALID [2020-07-28 18:05:43,792 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2020-07-28 18:05:43,792 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 18:05:43,792 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 7 [2020-07-28 18:05:43,792 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [725694584] [2020-07-28 18:05:43,793 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 27 [2020-07-28 18:05:43,793 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:05:43,793 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 18:05:43,829 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 29 edges. 29 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:43,829 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 18:05:43,829 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:05:43,829 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 18:05:43,830 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=22, Unknown=0, NotChecked=0, Total=42 [2020-07-28 18:05:43,830 INFO L87 Difference]: Start difference. First operand 29 states and 34 transitions. Second operand 7 states. [2020-07-28 18:05:44,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:44,089 INFO L93 Difference]: Finished difference Result 61 states and 72 transitions. [2020-07-28 18:05:44,089 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 18:05:44,089 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 27 [2020-07-28 18:05:44,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:05:44,089 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 18:05:44,091 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 66 transitions. [2020-07-28 18:05:44,091 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 18:05:44,093 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 66 transitions. [2020-07-28 18:05:44,093 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 66 transitions. [2020-07-28 18:05:44,171 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 66 edges. 66 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:44,172 INFO L225 Difference]: With dead ends: 61 [2020-07-28 18:05:44,173 INFO L226 Difference]: Without dead ends: 52 [2020-07-28 18:05:44,173 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=29, Unknown=0, NotChecked=0, Total=56 [2020-07-28 18:05:44,174 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2020-07-28 18:05:44,198 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 33. [2020-07-28 18:05:44,199 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:05:44,199 INFO L82 GeneralOperation]: Start isEquivalent. First operand 52 states. Second operand 33 states. [2020-07-28 18:05:44,199 INFO L74 IsIncluded]: Start isIncluded. First operand 52 states. Second operand 33 states. [2020-07-28 18:05:44,199 INFO L87 Difference]: Start difference. First operand 52 states. Second operand 33 states. [2020-07-28 18:05:44,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:44,201 INFO L93 Difference]: Finished difference Result 52 states and 61 transitions. [2020-07-28 18:05:44,202 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 61 transitions. [2020-07-28 18:05:44,202 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:44,202 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:44,203 INFO L74 IsIncluded]: Start isIncluded. First operand 33 states. Second operand 52 states. [2020-07-28 18:05:44,203 INFO L87 Difference]: Start difference. First operand 33 states. Second operand 52 states. [2020-07-28 18:05:44,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:44,205 INFO L93 Difference]: Finished difference Result 52 states and 61 transitions. [2020-07-28 18:05:44,205 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 61 transitions. [2020-07-28 18:05:44,206 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:44,206 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:44,206 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:05:44,206 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:05:44,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 33 states. [2020-07-28 18:05:44,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2020-07-28 18:05:44,208 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 27 [2020-07-28 18:05:44,208 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:05:44,208 INFO L479 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2020-07-28 18:05:44,208 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 18:05:44,208 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2020-07-28 18:05:44,209 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2020-07-28 18:05:44,209 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:05:44,209 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:05:44,422 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,3 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:05:44,423 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:05:44,423 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:05:44,424 INFO L82 PathProgramCache]: Analyzing trace with hash 1570454256, now seen corresponding path program 2 times [2020-07-28 18:05:44,424 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:05:44,425 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2105759468] [2020-07-28 18:05:44,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:05:44,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:44,613 INFO L280 TraceCheckUtils]: 0: Hoare triple {1092#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1092#true} is VALID [2020-07-28 18:05:44,615 INFO L280 TraceCheckUtils]: 1: Hoare triple {1092#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,616 INFO L280 TraceCheckUtils]: 2: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,616 INFO L280 TraceCheckUtils]: 3: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,616 INFO L280 TraceCheckUtils]: 4: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,617 INFO L280 TraceCheckUtils]: 5: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,617 INFO L280 TraceCheckUtils]: 6: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,618 INFO L280 TraceCheckUtils]: 7: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,618 INFO L280 TraceCheckUtils]: 8: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,620 INFO L280 TraceCheckUtils]: 9: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,620 INFO L280 TraceCheckUtils]: 10: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,621 INFO L280 TraceCheckUtils]: 11: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,622 INFO L280 TraceCheckUtils]: 12: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} assume !(dll_create_~len > 0); {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,623 INFO L280 TraceCheckUtils]: 13: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,624 INFO L280 TraceCheckUtils]: 14: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,624 INFO L280 TraceCheckUtils]: 15: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,625 INFO L280 TraceCheckUtils]: 16: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} assume !(dll_update_at_~index > 0); {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,626 INFO L280 TraceCheckUtils]: 17: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,626 INFO L280 TraceCheckUtils]: 18: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {1094#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,627 INFO L280 TraceCheckUtils]: 19: Hoare triple {1094#(<= 2 ULTIMATE.start_main_~len~0)} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {1095#(<= (+ ULTIMATE.start_main_~i~0 2) (+ ULTIMATE.start_main_~len~0 ULTIMATE.start_dll_update_at_~index))} is VALID [2020-07-28 18:05:44,628 INFO L280 TraceCheckUtils]: 20: Hoare triple {1095#(<= (+ ULTIMATE.start_main_~i~0 2) (+ ULTIMATE.start_main_~len~0 ULTIMATE.start_dll_update_at_~index))} assume !(dll_update_at_~index > 0); {1096#(<= (+ ULTIMATE.start_main_~i~0 2) ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,629 INFO L280 TraceCheckUtils]: 21: Hoare triple {1096#(<= (+ ULTIMATE.start_main_~i~0 2) ULTIMATE.start_main_~len~0)} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {1096#(<= (+ ULTIMATE.start_main_~i~0 2) ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,630 INFO L280 TraceCheckUtils]: 22: Hoare triple {1096#(<= (+ ULTIMATE.start_main_~i~0 2) ULTIMATE.start_main_~len~0)} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {1097#(<= (+ ULTIMATE.start_main_~i~0 1) ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:05:44,631 INFO L280 TraceCheckUtils]: 23: Hoare triple {1097#(<= (+ ULTIMATE.start_main_~i~0 1) ULTIMATE.start_main_~len~0)} assume !(main_~i~0 < main_~len~0); {1093#false} is VALID [2020-07-28 18:05:44,631 INFO L280 TraceCheckUtils]: 24: Hoare triple {1093#false} main_~i~0 := 0; {1093#false} is VALID [2020-07-28 18:05:44,631 INFO L280 TraceCheckUtils]: 25: Hoare triple {1093#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {1093#false} is VALID [2020-07-28 18:05:44,631 INFO L280 TraceCheckUtils]: 26: Hoare triple {1093#false} assume !(dll_get_data_at_~index > 0); {1093#false} is VALID [2020-07-28 18:05:44,632 INFO L280 TraceCheckUtils]: 27: Hoare triple {1093#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {1093#false} is VALID [2020-07-28 18:05:44,632 INFO L280 TraceCheckUtils]: 28: Hoare triple {1093#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {1093#false} is VALID [2020-07-28 18:05:44,632 INFO L280 TraceCheckUtils]: 29: Hoare triple {1093#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {1093#false} is VALID [2020-07-28 18:05:44,633 INFO L280 TraceCheckUtils]: 30: Hoare triple {1093#false} assume !false; {1093#false} is VALID [2020-07-28 18:05:44,634 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2020-07-28 18:05:44,634 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2105759468] [2020-07-28 18:05:44,635 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1450725540] [2020-07-28 18:05:44,635 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:05:44,716 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2020-07-28 18:05:44,717 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2020-07-28 18:05:44,718 INFO L263 TraceCheckSpWp]: Trace formula consists of 172 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-28 18:05:44,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:44,740 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 18:05:44,880 INFO L280 TraceCheckUtils]: 0: Hoare triple {1092#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1092#true} is VALID [2020-07-28 18:05:44,880 INFO L280 TraceCheckUtils]: 1: Hoare triple {1092#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {1092#true} is VALID [2020-07-28 18:05:44,880 INFO L280 TraceCheckUtils]: 2: Hoare triple {1092#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {1092#true} is VALID [2020-07-28 18:05:44,881 INFO L280 TraceCheckUtils]: 3: Hoare triple {1092#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {1092#true} is VALID [2020-07-28 18:05:44,881 INFO L280 TraceCheckUtils]: 4: Hoare triple {1092#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {1092#true} is VALID [2020-07-28 18:05:44,881 INFO L280 TraceCheckUtils]: 5: Hoare triple {1092#true} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {1092#true} is VALID [2020-07-28 18:05:44,882 INFO L280 TraceCheckUtils]: 6: Hoare triple {1092#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {1092#true} is VALID [2020-07-28 18:05:44,882 INFO L280 TraceCheckUtils]: 7: Hoare triple {1092#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {1092#true} is VALID [2020-07-28 18:05:44,882 INFO L280 TraceCheckUtils]: 8: Hoare triple {1092#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {1092#true} is VALID [2020-07-28 18:05:44,883 INFO L280 TraceCheckUtils]: 9: Hoare triple {1092#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {1092#true} is VALID [2020-07-28 18:05:44,883 INFO L280 TraceCheckUtils]: 10: Hoare triple {1092#true} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {1092#true} is VALID [2020-07-28 18:05:44,883 INFO L280 TraceCheckUtils]: 11: Hoare triple {1092#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {1092#true} is VALID [2020-07-28 18:05:44,883 INFO L280 TraceCheckUtils]: 12: Hoare triple {1092#true} assume !(dll_create_~len > 0); {1092#true} is VALID [2020-07-28 18:05:44,883 INFO L280 TraceCheckUtils]: 13: Hoare triple {1092#true} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {1092#true} is VALID [2020-07-28 18:05:44,885 INFO L280 TraceCheckUtils]: 14: Hoare triple {1092#true} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {1143#(<= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:44,885 INFO L280 TraceCheckUtils]: 15: Hoare triple {1143#(<= 0 ULTIMATE.start_main_~i~0)} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {1143#(<= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:44,886 INFO L280 TraceCheckUtils]: 16: Hoare triple {1143#(<= 0 ULTIMATE.start_main_~i~0)} assume !(dll_update_at_~index > 0); {1143#(<= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:44,891 INFO L280 TraceCheckUtils]: 17: Hoare triple {1143#(<= 0 ULTIMATE.start_main_~i~0)} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {1143#(<= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:44,892 INFO L280 TraceCheckUtils]: 18: Hoare triple {1143#(<= 0 ULTIMATE.start_main_~i~0)} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {1156#(<= 1 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:44,893 INFO L280 TraceCheckUtils]: 19: Hoare triple {1156#(<= 1 ULTIMATE.start_main_~i~0)} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {1160#(<= 1 ULTIMATE.start_dll_update_at_~index)} is VALID [2020-07-28 18:05:44,894 INFO L280 TraceCheckUtils]: 20: Hoare triple {1160#(<= 1 ULTIMATE.start_dll_update_at_~index)} assume !(dll_update_at_~index > 0); {1093#false} is VALID [2020-07-28 18:05:44,894 INFO L280 TraceCheckUtils]: 21: Hoare triple {1093#false} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {1093#false} is VALID [2020-07-28 18:05:44,895 INFO L280 TraceCheckUtils]: 22: Hoare triple {1093#false} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {1093#false} is VALID [2020-07-28 18:05:44,895 INFO L280 TraceCheckUtils]: 23: Hoare triple {1093#false} assume !(main_~i~0 < main_~len~0); {1093#false} is VALID [2020-07-28 18:05:44,895 INFO L280 TraceCheckUtils]: 24: Hoare triple {1093#false} main_~i~0 := 0; {1093#false} is VALID [2020-07-28 18:05:44,896 INFO L280 TraceCheckUtils]: 25: Hoare triple {1093#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {1093#false} is VALID [2020-07-28 18:05:44,896 INFO L280 TraceCheckUtils]: 26: Hoare triple {1093#false} assume !(dll_get_data_at_~index > 0); {1093#false} is VALID [2020-07-28 18:05:44,896 INFO L280 TraceCheckUtils]: 27: Hoare triple {1093#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {1093#false} is VALID [2020-07-28 18:05:44,896 INFO L280 TraceCheckUtils]: 28: Hoare triple {1093#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {1093#false} is VALID [2020-07-28 18:05:44,896 INFO L280 TraceCheckUtils]: 29: Hoare triple {1093#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {1093#false} is VALID [2020-07-28 18:05:44,897 INFO L280 TraceCheckUtils]: 30: Hoare triple {1093#false} assume !false; {1093#false} is VALID [2020-07-28 18:05:44,901 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2020-07-28 18:05:44,902 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 18:05:44,902 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 9 [2020-07-28 18:05:44,902 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1398940150] [2020-07-28 18:05:44,903 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 31 [2020-07-28 18:05:44,903 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:05:44,906 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states. [2020-07-28 18:05:44,961 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:44,962 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2020-07-28 18:05:44,962 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:05:44,963 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2020-07-28 18:05:44,963 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2020-07-28 18:05:44,964 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand 9 states. [2020-07-28 18:05:45,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:45,417 INFO L93 Difference]: Finished difference Result 56 states and 67 transitions. [2020-07-28 18:05:45,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 18:05:45,417 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 31 [2020-07-28 18:05:45,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:05:45,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-28 18:05:45,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 61 transitions. [2020-07-28 18:05:45,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-28 18:05:45,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 61 transitions. [2020-07-28 18:05:45,422 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 61 transitions. [2020-07-28 18:05:45,498 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:45,499 INFO L225 Difference]: With dead ends: 56 [2020-07-28 18:05:45,499 INFO L226 Difference]: Without dead ends: 43 [2020-07-28 18:05:45,500 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=129, Unknown=0, NotChecked=0, Total=182 [2020-07-28 18:05:45,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2020-07-28 18:05:45,541 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 34. [2020-07-28 18:05:45,541 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:05:45,541 INFO L82 GeneralOperation]: Start isEquivalent. First operand 43 states. Second operand 34 states. [2020-07-28 18:05:45,541 INFO L74 IsIncluded]: Start isIncluded. First operand 43 states. Second operand 34 states. [2020-07-28 18:05:45,541 INFO L87 Difference]: Start difference. First operand 43 states. Second operand 34 states. [2020-07-28 18:05:45,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:45,543 INFO L93 Difference]: Finished difference Result 43 states and 50 transitions. [2020-07-28 18:05:45,543 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 50 transitions. [2020-07-28 18:05:45,544 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:45,544 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:45,544 INFO L74 IsIncluded]: Start isIncluded. First operand 34 states. Second operand 43 states. [2020-07-28 18:05:45,544 INFO L87 Difference]: Start difference. First operand 34 states. Second operand 43 states. [2020-07-28 18:05:45,546 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:45,547 INFO L93 Difference]: Finished difference Result 43 states and 50 transitions. [2020-07-28 18:05:45,547 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 50 transitions. [2020-07-28 18:05:45,547 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:45,547 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:45,548 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:05:45,548 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:05:45,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 34 states. [2020-07-28 18:05:45,549 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 40 transitions. [2020-07-28 18:05:45,550 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 40 transitions. Word has length 31 [2020-07-28 18:05:45,550 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:05:45,550 INFO L479 AbstractCegarLoop]: Abstraction has 34 states and 40 transitions. [2020-07-28 18:05:45,550 INFO L480 AbstractCegarLoop]: Interpolant automaton has 9 states. [2020-07-28 18:05:45,551 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 40 transitions. [2020-07-28 18:05:45,551 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 18:05:45,551 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:05:45,552 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:05:45,763 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,4 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:05:45,764 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:05:45,765 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:05:45,765 INFO L82 PathProgramCache]: Analyzing trace with hash -688680177, now seen corresponding path program 1 times [2020-07-28 18:05:45,765 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:05:45,766 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [43902677] [2020-07-28 18:05:45,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:05:45,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:46,569 INFO L280 TraceCheckUtils]: 0: Hoare triple {1418#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1418#true} is VALID [2020-07-28 18:05:46,569 INFO L280 TraceCheckUtils]: 1: Hoare triple {1418#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {1418#true} is VALID [2020-07-28 18:05:46,571 INFO L280 TraceCheckUtils]: 2: Hoare triple {1418#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:05:46,571 INFO L280 TraceCheckUtils]: 3: Hoare triple {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:05:46,572 INFO L280 TraceCheckUtils]: 4: Hoare triple {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:05:46,573 INFO L280 TraceCheckUtils]: 5: Hoare triple {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:05:46,582 INFO L280 TraceCheckUtils]: 6: Hoare triple {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {1421#(= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base))} is VALID [2020-07-28 18:05:46,583 INFO L280 TraceCheckUtils]: 7: Hoare triple {1421#(= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base))} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {1422#(and (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} is VALID [2020-07-28 18:05:46,584 INFO L280 TraceCheckUtils]: 8: Hoare triple {1422#(and (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {1422#(and (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} is VALID [2020-07-28 18:05:46,586 INFO L280 TraceCheckUtils]: 9: Hoare triple {1422#(and (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {1423#(and (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} is VALID [2020-07-28 18:05:46,588 INFO L280 TraceCheckUtils]: 10: Hoare triple {1423#(and (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {1424#(and (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (= 0 ULTIMATE.start_dll_create_~new_head~0.offset))} is VALID [2020-07-28 18:05:46,589 INFO L280 TraceCheckUtils]: 11: Hoare triple {1424#(and (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (= 0 ULTIMATE.start_dll_create_~new_head~0.offset))} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {1425#(and (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) 4))) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} is VALID [2020-07-28 18:05:46,590 INFO L280 TraceCheckUtils]: 12: Hoare triple {1425#(and (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) 4))) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} assume !(dll_create_~len > 0); {1425#(and (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) 4))) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} is VALID [2020-07-28 18:05:46,591 INFO L280 TraceCheckUtils]: 13: Hoare triple {1425#(and (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) 4))) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {1426#(and (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) 4) |ULTIMATE.start_dll_create_#res.base|)) (= 0 |ULTIMATE.start_dll_create_#res.offset|))} is VALID [2020-07-28 18:05:46,592 INFO L280 TraceCheckUtils]: 14: Hoare triple {1426#(and (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) 4) |ULTIMATE.start_dll_create_#res.base|)) (= 0 |ULTIMATE.start_dll_create_#res.offset|))} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {1427#(and (= 0 ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0))} is VALID [2020-07-28 18:05:46,594 INFO L280 TraceCheckUtils]: 15: Hoare triple {1427#(and (= 0 ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {1428#(and (<= ULTIMATE.start_dll_update_at_~data ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_main_~s~0.offset) (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) 4) ULTIMATE.start_dll_update_at_~head.base)) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset) (<= ULTIMATE.start_main_~len~0 ULTIMATE.start_dll_update_at_~data))} is VALID [2020-07-28 18:05:46,595 INFO L280 TraceCheckUtils]: 16: Hoare triple {1428#(and (<= ULTIMATE.start_dll_update_at_~data ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_main_~s~0.offset) (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) 4) ULTIMATE.start_dll_update_at_~head.base)) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset) (<= ULTIMATE.start_main_~len~0 ULTIMATE.start_dll_update_at_~data))} assume !(dll_update_at_~index > 0); {1428#(and (<= ULTIMATE.start_dll_update_at_~data ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_main_~s~0.offset) (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) 4) ULTIMATE.start_dll_update_at_~head.base)) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset) (<= ULTIMATE.start_main_~len~0 ULTIMATE.start_dll_update_at_~data))} is VALID [2020-07-28 18:05:46,597 INFO L280 TraceCheckUtils]: 17: Hoare triple {1428#(and (<= ULTIMATE.start_dll_update_at_~data ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_main_~s~0.offset) (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) 4) ULTIMATE.start_dll_update_at_~head.base)) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset) (<= ULTIMATE.start_main_~len~0 ULTIMATE.start_dll_update_at_~data))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {1429#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} is VALID [2020-07-28 18:05:46,598 INFO L280 TraceCheckUtils]: 18: Hoare triple {1429#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {1429#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} is VALID [2020-07-28 18:05:46,599 INFO L280 TraceCheckUtils]: 19: Hoare triple {1429#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {1430#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) (+ ULTIMATE.start_dll_update_at_~head.offset 4)) ULTIMATE.start_main_~s~0.base)) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)) (= 0 ULTIMATE.start_dll_update_at_~head.offset))} is VALID [2020-07-28 18:05:46,600 INFO L280 TraceCheckUtils]: 20: Hoare triple {1430#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) (+ ULTIMATE.start_dll_update_at_~head.offset 4)) ULTIMATE.start_main_~s~0.base)) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)) (= 0 ULTIMATE.start_dll_update_at_~head.offset))} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {1431#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)))} is VALID [2020-07-28 18:05:46,601 INFO L280 TraceCheckUtils]: 21: Hoare triple {1431#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)))} assume !(dll_update_at_~index > 0); {1431#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)))} is VALID [2020-07-28 18:05:46,603 INFO L280 TraceCheckUtils]: 22: Hoare triple {1431#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {1432#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} is VALID [2020-07-28 18:05:46,604 INFO L280 TraceCheckUtils]: 23: Hoare triple {1432#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {1432#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} is VALID [2020-07-28 18:05:46,605 INFO L280 TraceCheckUtils]: 24: Hoare triple {1432#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} assume !(main_~i~0 < main_~len~0); {1432#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} is VALID [2020-07-28 18:05:46,606 INFO L280 TraceCheckUtils]: 25: Hoare triple {1432#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} main_~i~0 := 0; {1433#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} is VALID [2020-07-28 18:05:46,607 INFO L280 TraceCheckUtils]: 26: Hoare triple {1433#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {1434#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} is VALID [2020-07-28 18:05:46,608 INFO L280 TraceCheckUtils]: 27: Hoare triple {1434#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} assume !(dll_get_data_at_~index > 0); {1434#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} is VALID [2020-07-28 18:05:46,609 INFO L280 TraceCheckUtils]: 28: Hoare triple {1434#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {1435#(and (<= |ULTIMATE.start_dll_get_data_at_#res| ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_dll_get_data_at_#res|))} is VALID [2020-07-28 18:05:46,610 INFO L280 TraceCheckUtils]: 29: Hoare triple {1435#(and (<= |ULTIMATE.start_dll_get_data_at_#res| ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_dll_get_data_at_#res|))} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {1436#(and (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_main_#t~ret14|) (< |ULTIMATE.start_main_#t~ret14| (+ ULTIMATE.start_main_~expected~0 1)))} is VALID [2020-07-28 18:05:46,611 INFO L280 TraceCheckUtils]: 30: Hoare triple {1436#(and (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_main_#t~ret14|) (< |ULTIMATE.start_main_#t~ret14| (+ ULTIMATE.start_main_~expected~0 1)))} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {1419#false} is VALID [2020-07-28 18:05:46,611 INFO L280 TraceCheckUtils]: 31: Hoare triple {1419#false} assume !false; {1419#false} is VALID [2020-07-28 18:05:46,630 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 2 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:05:46,631 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [43902677] [2020-07-28 18:05:46,631 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1663993709] [2020-07-28 18:05:46,632 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:05:46,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:46,698 INFO L263 TraceCheckSpWp]: Trace formula consists of 179 conjuncts, 75 conjunts are in the unsatisfiable core [2020-07-28 18:05:46,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:46,720 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 18:05:46,769 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2020-07-28 18:05:46,770 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:05:46,774 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:05:46,774 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2020-07-28 18:05:46,774 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:6, output treesize:5 [2020-07-28 18:05:46,782 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-28 18:05:46,782 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#valid_7|]. (= |#valid| (store |v_#valid_7| ULTIMATE.start_dll_create_~new_head~0.base 1)) [2020-07-28 18:05:46,782 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base)) [2020-07-28 18:05:46,809 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:05:46,810 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 15 [2020-07-28 18:05:46,811 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:05:46,813 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:05:46,814 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2020-07-28 18:05:46,814 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:11, output treesize:4 [2020-07-28 18:05:46,864 INFO L350 Elim1Store]: treesize reduction 27, result has 25.0 percent of original size [2020-07-28 18:05:46,864 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2020-07-28 18:05:46,864 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:05:46,871 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:05:46,872 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-28 18:05:46,872 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:23, output treesize:23 [2020-07-28 18:05:47,020 INFO L350 Elim1Store]: treesize reduction 12, result has 87.9 percent of original size [2020-07-28 18:05:47,020 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 45 treesize of output 106 [2020-07-28 18:05:47,048 INFO L342 QuantifierPusher]: Applying distributivity to a CONJUNCTION[6, 3, 2, 1] term [2020-07-28 18:05:47,049 INFO L523 QuantifierPusher]: Distributing 2 conjuncts over 6 disjuncts [2020-07-28 18:05:47,050 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:05:47,073 INFO L624 ElimStorePlain]: treesize reduction 46, result has 43.2 percent of original size [2020-07-28 18:05:47,075 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-2 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-28 18:05:47,075 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 2 variables, input treesize:45, output treesize:35 [2020-07-28 18:05:47,080 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-28 18:05:47,080 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_14|, ULTIMATE.start_dll_create_~head~0.offset]. (let ((.cse1 (select |v_#memory_$Pointer$.base_14| ULTIMATE.start_dll_create_~new_head~0.base))) (let ((.cse0 (select .cse1 (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (and (not (= ULTIMATE.start_dll_create_~new_head~0.base .cse0)) (= |#memory_$Pointer$.base| (store |v_#memory_$Pointer$.base_14| .cse0 (store (select |v_#memory_$Pointer$.base_14| .cse0) (+ ULTIMATE.start_dll_create_~head~0.offset 8) ULTIMATE.start_dll_create_~new_head~0.base))) (= 0 (select .cse1 (+ ULTIMATE.start_dll_create_~new_head~0.offset 8)))))) [2020-07-28 18:05:47,081 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ [ULTIMATE.start_dll_create_~head~0.offset]. (let ((.cse1 (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base))) (let ((.cse0 (select .cse1 (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (and (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| .cse0) (+ ULTIMATE.start_dll_create_~head~0.offset 8))) (not (= ULTIMATE.start_dll_create_~new_head~0.base .cse0)) (= 0 (select .cse1 (+ ULTIMATE.start_dll_create_~new_head~0.offset 8)))))) [2020-07-28 18:05:47,507 INFO L440 ElimStorePlain]: Different costs {0=[|v_#memory_int_11|], 12=[|v_#memory_$Pointer$.base_15|]} [2020-07-28 18:05:47,511 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2020-07-28 18:05:47,511 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:05:47,526 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:05:47,530 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-28 18:05:47,531 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-28 18:05:47,532 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-28 18:05:47,586 INFO L350 Elim1Store]: treesize reduction 24, result has 68.4 percent of original size [2020-07-28 18:05:47,586 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 50 treesize of output 83 [2020-07-28 18:05:47,588 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-28 18:05:47,617 INFO L624 ElimStorePlain]: treesize reduction 38, result has 52.5 percent of original size [2020-07-28 18:05:47,627 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-28 18:05:47,628 INFO L244 ElimStorePlain]: Needed 3 recursive calls to eliminate 3 variables, input treesize:61, output treesize:42 [2020-07-28 18:05:47,854 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-28 18:05:47,871 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:05:47,872 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 4 new quantified variables, introduced 2 case distinctions, treesize of input 44 treesize of output 49 [2020-07-28 18:05:47,875 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:05:47,890 INFO L624 ElimStorePlain]: treesize reduction 16, result has 42.9 percent of original size [2020-07-28 18:05:47,891 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-28 18:05:47,891 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 2 variables, input treesize:51, output treesize:12 [2020-07-28 18:05:47,894 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-28 18:05:47,894 WARN L407 uantifierElimination]: Input elimination task: ∃ [|#memory_$Pointer$.base|, v_subst_1]. (let ((.cse0 (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base))) (let ((.cse1 (select .cse0 (+ ULTIMATE.start_main_~s~0.offset 4)))) (and (= (select .cse0 (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_main_~s~0.base .cse1)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| .cse1) (+ v_subst_1 8))) (= .cse1 ULTIMATE.start_dll_update_at_~head.base)))) [2020-07-28 18:05:47,894 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (and (= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base))) [2020-07-28 18:05:47,947 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 21 [2020-07-28 18:05:47,948 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:05:47,958 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:05:47,969 INFO L544 ElimStorePlain]: Start of recursive call 1: 3 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-28 18:05:47,969 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 4 variables, input treesize:30, output treesize:15 [2020-07-28 18:05:47,972 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-28 18:05:47,972 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_int_12|, ULTIMATE.start_dll_update_at_~head.base, ULTIMATE.start_dll_update_at_~head.offset, ULTIMATE.start_dll_update_at_~data]. (let ((.cse0 (select (select |v_#memory_int_12| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset))) (and (= (store |v_#memory_int_12| ULTIMATE.start_dll_update_at_~head.base (store (select |v_#memory_int_12| ULTIMATE.start_dll_update_at_~head.base) ULTIMATE.start_dll_update_at_~head.offset ULTIMATE.start_dll_update_at_~data)) |#memory_int|) (<= .cse0 ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)) (<= ULTIMATE.start_main_~len~0 .cse0))) [2020-07-28 18:05:47,972 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (let ((.cse0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset))) (and (<= .cse0 ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 .cse0))) [2020-07-28 18:05:48,028 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 10 [2020-07-28 18:05:48,032 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:05:48,036 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:05:48,037 INFO L544 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-28 18:05:48,037 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 3 variables, input treesize:22, output treesize:7 [2020-07-28 18:05:48,040 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-28 18:05:48,040 WARN L407 uantifierElimination]: Input elimination task: ∃ [|#memory_int|, ULTIMATE.start_dll_get_data_at_~head.base, ULTIMATE.start_dll_get_data_at_~head.offset]. (let ((.cse0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset))) (and (<= ULTIMATE.start_main_~expected~0 .cse0) (<= .cse0 ULTIMATE.start_main_~expected~0) (= |ULTIMATE.start_dll_get_data_at_#res| .cse0))) [2020-07-28 18:05:48,040 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (and (<= |ULTIMATE.start_dll_get_data_at_#res| ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_dll_get_data_at_#res|)) [2020-07-28 18:05:48,112 INFO L280 TraceCheckUtils]: 0: Hoare triple {1418#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1418#true} is VALID [2020-07-28 18:05:48,112 INFO L280 TraceCheckUtils]: 1: Hoare triple {1418#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {1418#true} is VALID [2020-07-28 18:05:48,114 INFO L280 TraceCheckUtils]: 2: Hoare triple {1418#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:05:48,115 INFO L280 TraceCheckUtils]: 3: Hoare triple {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:05:48,115 INFO L280 TraceCheckUtils]: 4: Hoare triple {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:05:48,116 INFO L280 TraceCheckUtils]: 5: Hoare triple {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:05:48,117 INFO L280 TraceCheckUtils]: 6: Hoare triple {1420#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {1421#(= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base))} is VALID [2020-07-28 18:05:48,117 INFO L280 TraceCheckUtils]: 7: Hoare triple {1421#(= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base))} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {1461#(not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:05:48,118 INFO L280 TraceCheckUtils]: 8: Hoare triple {1461#(not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base))} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {1461#(not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:05:48,119 INFO L280 TraceCheckUtils]: 9: Hoare triple {1461#(not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base))} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {1468#(and (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4))) (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 8))) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} is VALID [2020-07-28 18:05:48,121 INFO L280 TraceCheckUtils]: 10: Hoare triple {1468#(and (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4))) (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 8))) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {1472#(and (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 8))) (exists ((ULTIMATE.start_dll_create_~head~0.offset Int)) (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4))) (+ ULTIMATE.start_dll_create_~head~0.offset 8)))))} is VALID [2020-07-28 18:05:48,123 INFO L280 TraceCheckUtils]: 11: Hoare triple {1472#(and (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 8))) (exists ((ULTIMATE.start_dll_create_~head~0.offset Int)) (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4))) (+ ULTIMATE.start_dll_create_~head~0.offset 8)))))} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {1476#(and (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 8))) (exists ((v_subst_1 Int)) (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4))) (+ v_subst_1 8)))) (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4)))))} is VALID [2020-07-28 18:05:48,124 INFO L280 TraceCheckUtils]: 12: Hoare triple {1476#(and (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 8))) (exists ((v_subst_1 Int)) (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4))) (+ v_subst_1 8)))) (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4)))))} assume !(dll_create_~len > 0); {1476#(and (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 8))) (exists ((v_subst_1 Int)) (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4))) (+ v_subst_1 8)))) (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4)))))} is VALID [2020-07-28 18:05:48,127 INFO L280 TraceCheckUtils]: 13: Hoare triple {1476#(and (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 8))) (exists ((v_subst_1 Int)) (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4))) (+ v_subst_1 8)))) (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4)))))} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {1483#(and (not (= |ULTIMATE.start_dll_create_#res.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) (+ |ULTIMATE.start_dll_create_#res.offset| 4)))) (= 0 (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) (+ |ULTIMATE.start_dll_create_#res.offset| 8))) (exists ((v_subst_1 Int)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) (+ |ULTIMATE.start_dll_create_#res.offset| 4))) (+ v_subst_1 8)) |ULTIMATE.start_dll_create_#res.base|)))} is VALID [2020-07-28 18:05:48,128 INFO L280 TraceCheckUtils]: 14: Hoare triple {1483#(and (not (= |ULTIMATE.start_dll_create_#res.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) (+ |ULTIMATE.start_dll_create_#res.offset| 4)))) (= 0 (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) (+ |ULTIMATE.start_dll_create_#res.offset| 8))) (exists ((v_subst_1 Int)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) (+ |ULTIMATE.start_dll_create_#res.offset| 4))) (+ v_subst_1 8)) |ULTIMATE.start_dll_create_#res.base|)))} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {1487#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (exists ((v_subst_1 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_1 8)))))} is VALID [2020-07-28 18:05:48,132 INFO L280 TraceCheckUtils]: 15: Hoare triple {1487#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (exists ((v_subst_1 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_1 8)))))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {1491#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= ULTIMATE.start_dll_update_at_~data ULTIMATE.start_main_~len~0) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset) (exists ((v_subst_1 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_1 8)))))} is VALID [2020-07-28 18:05:48,133 INFO L280 TraceCheckUtils]: 16: Hoare triple {1491#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= ULTIMATE.start_dll_update_at_~data ULTIMATE.start_main_~len~0) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset) (exists ((v_subst_1 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_1 8)))))} assume !(dll_update_at_~index > 0); {1491#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= ULTIMATE.start_dll_update_at_~data ULTIMATE.start_main_~len~0) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset) (exists ((v_subst_1 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_1 8)))))} is VALID [2020-07-28 18:05:48,137 INFO L280 TraceCheckUtils]: 17: Hoare triple {1491#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= ULTIMATE.start_dll_update_at_~data ULTIMATE.start_main_~len~0) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset) (exists ((v_subst_1 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_1 8)))))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {1498#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (exists ((v_subst_1 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_1 8)))))} is VALID [2020-07-28 18:05:48,139 INFO L280 TraceCheckUtils]: 18: Hoare triple {1498#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (exists ((v_subst_1 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_1 8)))))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {1498#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (exists ((v_subst_1 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_1 8)))))} is VALID [2020-07-28 18:05:48,140 INFO L280 TraceCheckUtils]: 19: Hoare triple {1498#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (exists ((v_subst_1 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_1 8)))))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {1505#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset) (exists ((v_subst_1 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_1 8)))))} is VALID [2020-07-28 18:05:48,141 INFO L280 TraceCheckUtils]: 20: Hoare triple {1505#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset) (exists ((v_subst_1 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_1 8)))))} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {1431#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)))} is VALID [2020-07-28 18:05:48,142 INFO L280 TraceCheckUtils]: 21: Hoare triple {1431#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)))} assume !(dll_update_at_~index > 0); {1431#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)))} is VALID [2020-07-28 18:05:48,143 INFO L280 TraceCheckUtils]: 22: Hoare triple {1431#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {1432#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} is VALID [2020-07-28 18:05:48,144 INFO L280 TraceCheckUtils]: 23: Hoare triple {1432#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {1432#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} is VALID [2020-07-28 18:05:48,145 INFO L280 TraceCheckUtils]: 24: Hoare triple {1432#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} assume !(main_~i~0 < main_~len~0); {1432#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} is VALID [2020-07-28 18:05:48,146 INFO L280 TraceCheckUtils]: 25: Hoare triple {1432#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} main_~i~0 := 0; {1433#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} is VALID [2020-07-28 18:05:48,151 INFO L280 TraceCheckUtils]: 26: Hoare triple {1433#(and (<= (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset) ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)))} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {1434#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} is VALID [2020-07-28 18:05:48,152 INFO L280 TraceCheckUtils]: 27: Hoare triple {1434#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} assume !(dll_get_data_at_~index > 0); {1434#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} is VALID [2020-07-28 18:05:48,153 INFO L280 TraceCheckUtils]: 28: Hoare triple {1434#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {1435#(and (<= |ULTIMATE.start_dll_get_data_at_#res| ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_dll_get_data_at_#res|))} is VALID [2020-07-28 18:05:48,153 INFO L280 TraceCheckUtils]: 29: Hoare triple {1435#(and (<= |ULTIMATE.start_dll_get_data_at_#res| ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_dll_get_data_at_#res|))} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {1436#(and (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_main_#t~ret14|) (< |ULTIMATE.start_main_#t~ret14| (+ ULTIMATE.start_main_~expected~0 1)))} is VALID [2020-07-28 18:05:48,154 INFO L280 TraceCheckUtils]: 30: Hoare triple {1436#(and (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_main_#t~ret14|) (< |ULTIMATE.start_main_#t~ret14| (+ ULTIMATE.start_main_~expected~0 1)))} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {1419#false} is VALID [2020-07-28 18:05:48,154 INFO L280 TraceCheckUtils]: 31: Hoare triple {1419#false} assume !false; {1419#false} is VALID [2020-07-28 18:05:48,160 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 2 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:05:48,160 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 18:05:48,160 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 19] total 28 [2020-07-28 18:05:48,161 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [36693128] [2020-07-28 18:05:48,161 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 32 [2020-07-28 18:05:48,161 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:05:48,162 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 28 states. [2020-07-28 18:05:48,244 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:48,244 INFO L459 AbstractCegarLoop]: Interpolant automaton has 28 states [2020-07-28 18:05:48,245 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:05:48,245 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2020-07-28 18:05:48,245 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=65, Invalid=691, Unknown=0, NotChecked=0, Total=756 [2020-07-28 18:05:48,246 INFO L87 Difference]: Start difference. First operand 34 states and 40 transitions. Second operand 28 states. [2020-07-28 18:05:49,984 WARN L193 SmtUtils]: Spent 102.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 59 [2020-07-28 18:05:50,421 WARN L193 SmtUtils]: Spent 138.00 ms on a formula simplification. DAG size of input: 84 DAG size of output: 76 [2020-07-28 18:05:51,155 WARN L193 SmtUtils]: Spent 173.00 ms on a formula simplification. DAG size of input: 97 DAG size of output: 83 [2020-07-28 18:05:52,243 WARN L193 SmtUtils]: Spent 115.00 ms on a formula simplification. DAG size of input: 79 DAG size of output: 63 [2020-07-28 18:05:52,786 WARN L193 SmtUtils]: Spent 109.00 ms on a formula simplification. DAG size of input: 77 DAG size of output: 61 [2020-07-28 18:05:55,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:55,899 INFO L93 Difference]: Finished difference Result 100 states and 122 transitions. [2020-07-28 18:05:55,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2020-07-28 18:05:55,899 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 32 [2020-07-28 18:05:55,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:05:55,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 28 states. [2020-07-28 18:05:55,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 119 transitions. [2020-07-28 18:05:55,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 28 states. [2020-07-28 18:05:55,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 119 transitions. [2020-07-28 18:05:55,906 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 38 states and 119 transitions. [2020-07-28 18:05:56,169 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 119 edges. 119 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:56,173 INFO L225 Difference]: With dead ends: 100 [2020-07-28 18:05:56,173 INFO L226 Difference]: Without dead ends: 98 [2020-07-28 18:05:56,175 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 22 SyntacticMatches, 2 SemanticMatches, 61 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 709 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=569, Invalid=3337, Unknown=0, NotChecked=0, Total=3906 [2020-07-28 18:05:56,175 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2020-07-28 18:05:56,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 49. [2020-07-28 18:05:56,341 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:05:56,341 INFO L82 GeneralOperation]: Start isEquivalent. First operand 98 states. Second operand 49 states. [2020-07-28 18:05:56,341 INFO L74 IsIncluded]: Start isIncluded. First operand 98 states. Second operand 49 states. [2020-07-28 18:05:56,341 INFO L87 Difference]: Start difference. First operand 98 states. Second operand 49 states. [2020-07-28 18:05:56,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:56,345 INFO L93 Difference]: Finished difference Result 98 states and 120 transitions. [2020-07-28 18:05:56,346 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 120 transitions. [2020-07-28 18:05:56,346 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:56,346 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:56,346 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 98 states. [2020-07-28 18:05:56,347 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 98 states. [2020-07-28 18:05:56,350 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:56,350 INFO L93 Difference]: Finished difference Result 98 states and 120 transitions. [2020-07-28 18:05:56,351 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 120 transitions. [2020-07-28 18:05:56,351 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:56,351 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:56,351 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:05:56,352 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:05:56,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2020-07-28 18:05:56,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 59 transitions. [2020-07-28 18:05:56,354 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 59 transitions. Word has length 32 [2020-07-28 18:05:56,354 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:05:56,354 INFO L479 AbstractCegarLoop]: Abstraction has 49 states and 59 transitions. [2020-07-28 18:05:56,354 INFO L480 AbstractCegarLoop]: Interpolant automaton has 28 states. [2020-07-28 18:05:56,354 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 59 transitions. [2020-07-28 18:05:56,355 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 18:05:56,355 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:05:56,355 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:05:56,569 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,5 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:05:56,570 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:05:56,570 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:05:56,570 INFO L82 PathProgramCache]: Analyzing trace with hash -1908545476, now seen corresponding path program 2 times [2020-07-28 18:05:56,571 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:05:56,571 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1217346897] [2020-07-28 18:05:56,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:05:56,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:56,656 INFO L280 TraceCheckUtils]: 0: Hoare triple {2022#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {2022#true} is VALID [2020-07-28 18:05:56,656 INFO L280 TraceCheckUtils]: 1: Hoare triple {2022#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {2022#true} is VALID [2020-07-28 18:05:56,656 INFO L280 TraceCheckUtils]: 2: Hoare triple {2022#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {2022#true} is VALID [2020-07-28 18:05:56,656 INFO L280 TraceCheckUtils]: 3: Hoare triple {2022#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {2022#true} is VALID [2020-07-28 18:05:56,657 INFO L280 TraceCheckUtils]: 4: Hoare triple {2022#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {2022#true} is VALID [2020-07-28 18:05:56,657 INFO L280 TraceCheckUtils]: 5: Hoare triple {2022#true} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {2022#true} is VALID [2020-07-28 18:05:56,657 INFO L280 TraceCheckUtils]: 6: Hoare triple {2022#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {2022#true} is VALID [2020-07-28 18:05:56,658 INFO L280 TraceCheckUtils]: 7: Hoare triple {2022#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {2022#true} is VALID [2020-07-28 18:05:56,658 INFO L280 TraceCheckUtils]: 8: Hoare triple {2022#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {2022#true} is VALID [2020-07-28 18:05:56,658 INFO L280 TraceCheckUtils]: 9: Hoare triple {2022#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {2022#true} is VALID [2020-07-28 18:05:56,658 INFO L280 TraceCheckUtils]: 10: Hoare triple {2022#true} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {2022#true} is VALID [2020-07-28 18:05:56,658 INFO L280 TraceCheckUtils]: 11: Hoare triple {2022#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {2022#true} is VALID [2020-07-28 18:05:56,659 INFO L280 TraceCheckUtils]: 12: Hoare triple {2022#true} assume !(dll_create_~len > 0); {2022#true} is VALID [2020-07-28 18:05:56,659 INFO L280 TraceCheckUtils]: 13: Hoare triple {2022#true} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {2022#true} is VALID [2020-07-28 18:05:56,660 INFO L280 TraceCheckUtils]: 14: Hoare triple {2022#true} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {2024#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:56,662 INFO L280 TraceCheckUtils]: 15: Hoare triple {2024#(= 0 ULTIMATE.start_main_~i~0)} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {2025#(= 0 ULTIMATE.start_dll_update_at_~index)} is VALID [2020-07-28 18:05:56,663 INFO L280 TraceCheckUtils]: 16: Hoare triple {2025#(= 0 ULTIMATE.start_dll_update_at_~index)} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {2023#false} is VALID [2020-07-28 18:05:56,663 INFO L280 TraceCheckUtils]: 17: Hoare triple {2023#false} assume !(dll_update_at_~index > 0); {2023#false} is VALID [2020-07-28 18:05:56,663 INFO L280 TraceCheckUtils]: 18: Hoare triple {2023#false} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {2023#false} is VALID [2020-07-28 18:05:56,664 INFO L280 TraceCheckUtils]: 19: Hoare triple {2023#false} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {2023#false} is VALID [2020-07-28 18:05:56,664 INFO L280 TraceCheckUtils]: 20: Hoare triple {2023#false} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {2023#false} is VALID [2020-07-28 18:05:56,664 INFO L280 TraceCheckUtils]: 21: Hoare triple {2023#false} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {2023#false} is VALID [2020-07-28 18:05:56,665 INFO L280 TraceCheckUtils]: 22: Hoare triple {2023#false} assume !(dll_update_at_~index > 0); {2023#false} is VALID [2020-07-28 18:05:56,665 INFO L280 TraceCheckUtils]: 23: Hoare triple {2023#false} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {2023#false} is VALID [2020-07-28 18:05:56,665 INFO L280 TraceCheckUtils]: 24: Hoare triple {2023#false} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {2023#false} is VALID [2020-07-28 18:05:56,665 INFO L280 TraceCheckUtils]: 25: Hoare triple {2023#false} assume !(main_~i~0 < main_~len~0); {2023#false} is VALID [2020-07-28 18:05:56,665 INFO L280 TraceCheckUtils]: 26: Hoare triple {2023#false} main_~i~0 := 0; {2023#false} is VALID [2020-07-28 18:05:56,666 INFO L280 TraceCheckUtils]: 27: Hoare triple {2023#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {2023#false} is VALID [2020-07-28 18:05:56,666 INFO L280 TraceCheckUtils]: 28: Hoare triple {2023#false} assume !(dll_get_data_at_~index > 0); {2023#false} is VALID [2020-07-28 18:05:56,666 INFO L280 TraceCheckUtils]: 29: Hoare triple {2023#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {2023#false} is VALID [2020-07-28 18:05:56,666 INFO L280 TraceCheckUtils]: 30: Hoare triple {2023#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {2023#false} is VALID [2020-07-28 18:05:56,667 INFO L280 TraceCheckUtils]: 31: Hoare triple {2023#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {2023#false} is VALID [2020-07-28 18:05:56,667 INFO L280 TraceCheckUtils]: 32: Hoare triple {2023#false} assume !false; {2023#false} is VALID [2020-07-28 18:05:56,668 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2020-07-28 18:05:56,669 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1217346897] [2020-07-28 18:05:56,669 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:05:56,670 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 18:05:56,670 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [64780469] [2020-07-28 18:05:56,671 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 18:05:56,671 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:05:56,671 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 18:05:56,709 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:56,710 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 18:05:56,710 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:05:56,710 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 18:05:56,710 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 18:05:56,710 INFO L87 Difference]: Start difference. First operand 49 states and 59 transitions. Second operand 4 states. [2020-07-28 18:05:56,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:56,993 INFO L93 Difference]: Finished difference Result 71 states and 85 transitions. [2020-07-28 18:05:56,993 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 18:05:56,994 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 18:05:56,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:05:56,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 18:05:56,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 58 transitions. [2020-07-28 18:05:56,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 18:05:56,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 58 transitions. [2020-07-28 18:05:56,997 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 58 transitions. [2020-07-28 18:05:57,085 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:57,087 INFO L225 Difference]: With dead ends: 71 [2020-07-28 18:05:57,087 INFO L226 Difference]: Without dead ends: 53 [2020-07-28 18:05:57,088 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:05:57,088 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2020-07-28 18:05:57,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 45. [2020-07-28 18:05:57,226 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:05:57,226 INFO L82 GeneralOperation]: Start isEquivalent. First operand 53 states. Second operand 45 states. [2020-07-28 18:05:57,226 INFO L74 IsIncluded]: Start isIncluded. First operand 53 states. Second operand 45 states. [2020-07-28 18:05:57,226 INFO L87 Difference]: Start difference. First operand 53 states. Second operand 45 states. [2020-07-28 18:05:57,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:57,229 INFO L93 Difference]: Finished difference Result 53 states and 62 transitions. [2020-07-28 18:05:57,229 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 62 transitions. [2020-07-28 18:05:57,229 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:57,229 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:57,229 INFO L74 IsIncluded]: Start isIncluded. First operand 45 states. Second operand 53 states. [2020-07-28 18:05:57,229 INFO L87 Difference]: Start difference. First operand 45 states. Second operand 53 states. [2020-07-28 18:05:57,231 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:57,231 INFO L93 Difference]: Finished difference Result 53 states and 62 transitions. [2020-07-28 18:05:57,231 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 62 transitions. [2020-07-28 18:05:57,232 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:57,232 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:57,232 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:05:57,232 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:05:57,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 45 states. [2020-07-28 18:05:57,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 53 transitions. [2020-07-28 18:05:57,234 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 53 transitions. Word has length 33 [2020-07-28 18:05:57,235 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:05:57,235 INFO L479 AbstractCegarLoop]: Abstraction has 45 states and 53 transitions. [2020-07-28 18:05:57,235 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 18:05:57,235 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 53 transitions. [2020-07-28 18:05:57,236 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 18:05:57,236 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:05:57,236 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:05:57,236 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 18:05:57,237 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:05:57,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:05:57,237 INFO L82 PathProgramCache]: Analyzing trace with hash -2002370864, now seen corresponding path program 3 times [2020-07-28 18:05:57,237 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:05:57,238 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1167148130] [2020-07-28 18:05:57,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:05:57,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:57,305 INFO L280 TraceCheckUtils]: 0: Hoare triple {2305#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {2305#true} is VALID [2020-07-28 18:05:57,305 INFO L280 TraceCheckUtils]: 1: Hoare triple {2305#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {2305#true} is VALID [2020-07-28 18:05:57,305 INFO L280 TraceCheckUtils]: 2: Hoare triple {2305#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {2305#true} is VALID [2020-07-28 18:05:57,305 INFO L280 TraceCheckUtils]: 3: Hoare triple {2305#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {2305#true} is VALID [2020-07-28 18:05:57,306 INFO L280 TraceCheckUtils]: 4: Hoare triple {2305#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {2305#true} is VALID [2020-07-28 18:05:57,306 INFO L280 TraceCheckUtils]: 5: Hoare triple {2305#true} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {2305#true} is VALID [2020-07-28 18:05:57,306 INFO L280 TraceCheckUtils]: 6: Hoare triple {2305#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {2305#true} is VALID [2020-07-28 18:05:57,306 INFO L280 TraceCheckUtils]: 7: Hoare triple {2305#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {2305#true} is VALID [2020-07-28 18:05:57,306 INFO L280 TraceCheckUtils]: 8: Hoare triple {2305#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {2305#true} is VALID [2020-07-28 18:05:57,307 INFO L280 TraceCheckUtils]: 9: Hoare triple {2305#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {2305#true} is VALID [2020-07-28 18:05:57,307 INFO L280 TraceCheckUtils]: 10: Hoare triple {2305#true} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {2305#true} is VALID [2020-07-28 18:05:57,307 INFO L280 TraceCheckUtils]: 11: Hoare triple {2305#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {2305#true} is VALID [2020-07-28 18:05:57,308 INFO L280 TraceCheckUtils]: 12: Hoare triple {2305#true} assume !(dll_create_~len > 0); {2305#true} is VALID [2020-07-28 18:05:57,308 INFO L280 TraceCheckUtils]: 13: Hoare triple {2305#true} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {2305#true} is VALID [2020-07-28 18:05:57,309 INFO L280 TraceCheckUtils]: 14: Hoare triple {2305#true} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {2307#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:57,309 INFO L280 TraceCheckUtils]: 15: Hoare triple {2307#(= 0 ULTIMATE.start_main_~i~0)} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {2307#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:57,310 INFO L280 TraceCheckUtils]: 16: Hoare triple {2307#(= 0 ULTIMATE.start_main_~i~0)} assume !(dll_update_at_~index > 0); {2307#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:57,311 INFO L280 TraceCheckUtils]: 17: Hoare triple {2307#(= 0 ULTIMATE.start_main_~i~0)} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {2307#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:57,311 INFO L280 TraceCheckUtils]: 18: Hoare triple {2307#(= 0 ULTIMATE.start_main_~i~0)} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {2308#(<= ULTIMATE.start_main_~i~0 1)} is VALID [2020-07-28 18:05:57,312 INFO L280 TraceCheckUtils]: 19: Hoare triple {2308#(<= ULTIMATE.start_main_~i~0 1)} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {2309#(<= ULTIMATE.start_dll_update_at_~index 1)} is VALID [2020-07-28 18:05:57,314 INFO L280 TraceCheckUtils]: 20: Hoare triple {2309#(<= ULTIMATE.start_dll_update_at_~index 1)} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {2310#(<= ULTIMATE.start_dll_update_at_~index 0)} is VALID [2020-07-28 18:05:57,315 INFO L280 TraceCheckUtils]: 21: Hoare triple {2310#(<= ULTIMATE.start_dll_update_at_~index 0)} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {2306#false} is VALID [2020-07-28 18:05:57,315 INFO L280 TraceCheckUtils]: 22: Hoare triple {2306#false} assume !(dll_update_at_~index > 0); {2306#false} is VALID [2020-07-28 18:05:57,315 INFO L280 TraceCheckUtils]: 23: Hoare triple {2306#false} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {2306#false} is VALID [2020-07-28 18:05:57,315 INFO L280 TraceCheckUtils]: 24: Hoare triple {2306#false} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {2306#false} is VALID [2020-07-28 18:05:57,315 INFO L280 TraceCheckUtils]: 25: Hoare triple {2306#false} assume !(main_~i~0 < main_~len~0); {2306#false} is VALID [2020-07-28 18:05:57,316 INFO L280 TraceCheckUtils]: 26: Hoare triple {2306#false} main_~i~0 := 0; {2306#false} is VALID [2020-07-28 18:05:57,316 INFO L280 TraceCheckUtils]: 27: Hoare triple {2306#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {2306#false} is VALID [2020-07-28 18:05:57,316 INFO L280 TraceCheckUtils]: 28: Hoare triple {2306#false} assume !(dll_get_data_at_~index > 0); {2306#false} is VALID [2020-07-28 18:05:57,316 INFO L280 TraceCheckUtils]: 29: Hoare triple {2306#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {2306#false} is VALID [2020-07-28 18:05:57,317 INFO L280 TraceCheckUtils]: 30: Hoare triple {2306#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {2306#false} is VALID [2020-07-28 18:05:57,317 INFO L280 TraceCheckUtils]: 31: Hoare triple {2306#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {2306#false} is VALID [2020-07-28 18:05:57,317 INFO L280 TraceCheckUtils]: 32: Hoare triple {2306#false} assume !false; {2306#false} is VALID [2020-07-28 18:05:57,318 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 8 proven. 3 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2020-07-28 18:05:57,318 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1167148130] [2020-07-28 18:05:57,318 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1124755516] [2020-07-28 18:05:57,318 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:05:57,616 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2020-07-28 18:05:57,616 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2020-07-28 18:05:57,618 INFO L263 TraceCheckSpWp]: Trace formula consists of 186 conjuncts, 6 conjunts are in the unsatisfiable core [2020-07-28 18:05:57,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:57,631 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 18:05:57,762 INFO L280 TraceCheckUtils]: 0: Hoare triple {2305#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {2305#true} is VALID [2020-07-28 18:05:57,762 INFO L280 TraceCheckUtils]: 1: Hoare triple {2305#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {2305#true} is VALID [2020-07-28 18:05:57,762 INFO L280 TraceCheckUtils]: 2: Hoare triple {2305#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {2305#true} is VALID [2020-07-28 18:05:57,762 INFO L280 TraceCheckUtils]: 3: Hoare triple {2305#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {2305#true} is VALID [2020-07-28 18:05:57,763 INFO L280 TraceCheckUtils]: 4: Hoare triple {2305#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {2305#true} is VALID [2020-07-28 18:05:57,763 INFO L280 TraceCheckUtils]: 5: Hoare triple {2305#true} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {2305#true} is VALID [2020-07-28 18:05:57,763 INFO L280 TraceCheckUtils]: 6: Hoare triple {2305#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {2305#true} is VALID [2020-07-28 18:05:57,763 INFO L280 TraceCheckUtils]: 7: Hoare triple {2305#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {2305#true} is VALID [2020-07-28 18:05:57,763 INFO L280 TraceCheckUtils]: 8: Hoare triple {2305#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {2305#true} is VALID [2020-07-28 18:05:57,764 INFO L280 TraceCheckUtils]: 9: Hoare triple {2305#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {2305#true} is VALID [2020-07-28 18:05:57,764 INFO L280 TraceCheckUtils]: 10: Hoare triple {2305#true} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {2305#true} is VALID [2020-07-28 18:05:57,764 INFO L280 TraceCheckUtils]: 11: Hoare triple {2305#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {2305#true} is VALID [2020-07-28 18:05:57,765 INFO L280 TraceCheckUtils]: 12: Hoare triple {2305#true} assume !(dll_create_~len > 0); {2305#true} is VALID [2020-07-28 18:05:57,765 INFO L280 TraceCheckUtils]: 13: Hoare triple {2305#true} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {2305#true} is VALID [2020-07-28 18:05:57,766 INFO L280 TraceCheckUtils]: 14: Hoare triple {2305#true} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {2356#(<= ULTIMATE.start_main_~i~0 0)} is VALID [2020-07-28 18:05:57,767 INFO L280 TraceCheckUtils]: 15: Hoare triple {2356#(<= ULTIMATE.start_main_~i~0 0)} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {2356#(<= ULTIMATE.start_main_~i~0 0)} is VALID [2020-07-28 18:05:57,767 INFO L280 TraceCheckUtils]: 16: Hoare triple {2356#(<= ULTIMATE.start_main_~i~0 0)} assume !(dll_update_at_~index > 0); {2356#(<= ULTIMATE.start_main_~i~0 0)} is VALID [2020-07-28 18:05:57,768 INFO L280 TraceCheckUtils]: 17: Hoare triple {2356#(<= ULTIMATE.start_main_~i~0 0)} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {2356#(<= ULTIMATE.start_main_~i~0 0)} is VALID [2020-07-28 18:05:57,769 INFO L280 TraceCheckUtils]: 18: Hoare triple {2356#(<= ULTIMATE.start_main_~i~0 0)} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {2308#(<= ULTIMATE.start_main_~i~0 1)} is VALID [2020-07-28 18:05:57,770 INFO L280 TraceCheckUtils]: 19: Hoare triple {2308#(<= ULTIMATE.start_main_~i~0 1)} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {2309#(<= ULTIMATE.start_dll_update_at_~index 1)} is VALID [2020-07-28 18:05:57,771 INFO L280 TraceCheckUtils]: 20: Hoare triple {2309#(<= ULTIMATE.start_dll_update_at_~index 1)} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {2310#(<= ULTIMATE.start_dll_update_at_~index 0)} is VALID [2020-07-28 18:05:57,772 INFO L280 TraceCheckUtils]: 21: Hoare triple {2310#(<= ULTIMATE.start_dll_update_at_~index 0)} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {2306#false} is VALID [2020-07-28 18:05:57,772 INFO L280 TraceCheckUtils]: 22: Hoare triple {2306#false} assume !(dll_update_at_~index > 0); {2306#false} is VALID [2020-07-28 18:05:57,772 INFO L280 TraceCheckUtils]: 23: Hoare triple {2306#false} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {2306#false} is VALID [2020-07-28 18:05:57,772 INFO L280 TraceCheckUtils]: 24: Hoare triple {2306#false} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {2306#false} is VALID [2020-07-28 18:05:57,772 INFO L280 TraceCheckUtils]: 25: Hoare triple {2306#false} assume !(main_~i~0 < main_~len~0); {2306#false} is VALID [2020-07-28 18:05:57,773 INFO L280 TraceCheckUtils]: 26: Hoare triple {2306#false} main_~i~0 := 0; {2306#false} is VALID [2020-07-28 18:05:57,773 INFO L280 TraceCheckUtils]: 27: Hoare triple {2306#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {2306#false} is VALID [2020-07-28 18:05:57,773 INFO L280 TraceCheckUtils]: 28: Hoare triple {2306#false} assume !(dll_get_data_at_~index > 0); {2306#false} is VALID [2020-07-28 18:05:57,773 INFO L280 TraceCheckUtils]: 29: Hoare triple {2306#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {2306#false} is VALID [2020-07-28 18:05:57,774 INFO L280 TraceCheckUtils]: 30: Hoare triple {2306#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {2306#false} is VALID [2020-07-28 18:05:57,774 INFO L280 TraceCheckUtils]: 31: Hoare triple {2306#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {2306#false} is VALID [2020-07-28 18:05:57,774 INFO L280 TraceCheckUtils]: 32: Hoare triple {2306#false} assume !false; {2306#false} is VALID [2020-07-28 18:05:57,775 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 8 proven. 3 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2020-07-28 18:05:57,775 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 18:05:57,776 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 7 [2020-07-28 18:05:57,776 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1426452729] [2020-07-28 18:05:57,776 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 33 [2020-07-28 18:05:57,776 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:05:57,777 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 18:05:57,814 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:57,814 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 18:05:57,814 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:05:57,814 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 18:05:57,815 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2020-07-28 18:05:57,815 INFO L87 Difference]: Start difference. First operand 45 states and 53 transitions. Second operand 7 states. [2020-07-28 18:05:58,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:58,270 INFO L93 Difference]: Finished difference Result 79 states and 93 transitions. [2020-07-28 18:05:58,271 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 18:05:58,271 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 33 [2020-07-28 18:05:58,271 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:05:58,271 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 18:05:58,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 71 transitions. [2020-07-28 18:05:58,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 18:05:58,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 71 transitions. [2020-07-28 18:05:58,273 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 71 transitions. [2020-07-28 18:05:58,367 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:58,368 INFO L225 Difference]: With dead ends: 79 [2020-07-28 18:05:58,369 INFO L226 Difference]: Without dead ends: 65 [2020-07-28 18:05:58,370 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2020-07-28 18:05:58,370 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2020-07-28 18:05:58,534 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 47. [2020-07-28 18:05:58,534 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:05:58,534 INFO L82 GeneralOperation]: Start isEquivalent. First operand 65 states. Second operand 47 states. [2020-07-28 18:05:58,534 INFO L74 IsIncluded]: Start isIncluded. First operand 65 states. Second operand 47 states. [2020-07-28 18:05:58,534 INFO L87 Difference]: Start difference. First operand 65 states. Second operand 47 states. [2020-07-28 18:05:58,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:58,536 INFO L93 Difference]: Finished difference Result 65 states and 75 transitions. [2020-07-28 18:05:58,537 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 75 transitions. [2020-07-28 18:05:58,537 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:58,537 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:58,537 INFO L74 IsIncluded]: Start isIncluded. First operand 47 states. Second operand 65 states. [2020-07-28 18:05:58,537 INFO L87 Difference]: Start difference. First operand 47 states. Second operand 65 states. [2020-07-28 18:05:58,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:58,539 INFO L93 Difference]: Finished difference Result 65 states and 75 transitions. [2020-07-28 18:05:58,539 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 75 transitions. [2020-07-28 18:05:58,540 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:58,540 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:58,540 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:05:58,540 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:05:58,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47 states. [2020-07-28 18:05:58,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 55 transitions. [2020-07-28 18:05:58,542 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 55 transitions. Word has length 33 [2020-07-28 18:05:58,542 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:05:58,542 INFO L479 AbstractCegarLoop]: Abstraction has 47 states and 55 transitions. [2020-07-28 18:05:58,542 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 18:05:58,542 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 55 transitions. [2020-07-28 18:05:58,542 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 18:05:58,543 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:05:58,543 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:05:58,754 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,6 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:05:58,754 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:05:58,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:05:58,755 INFO L82 PathProgramCache]: Analyzing trace with hash 177405100, now seen corresponding path program 1 times [2020-07-28 18:05:58,755 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:05:58,756 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1604927440] [2020-07-28 18:05:58,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:05:58,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:58,800 INFO L280 TraceCheckUtils]: 0: Hoare triple {2731#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {2731#true} is VALID [2020-07-28 18:05:58,800 INFO L280 TraceCheckUtils]: 1: Hoare triple {2731#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {2731#true} is VALID [2020-07-28 18:05:58,800 INFO L280 TraceCheckUtils]: 2: Hoare triple {2731#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {2731#true} is VALID [2020-07-28 18:05:58,801 INFO L280 TraceCheckUtils]: 3: Hoare triple {2731#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {2731#true} is VALID [2020-07-28 18:05:58,801 INFO L280 TraceCheckUtils]: 4: Hoare triple {2731#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {2731#true} is VALID [2020-07-28 18:05:58,801 INFO L280 TraceCheckUtils]: 5: Hoare triple {2731#true} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {2731#true} is VALID [2020-07-28 18:05:58,801 INFO L280 TraceCheckUtils]: 6: Hoare triple {2731#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {2731#true} is VALID [2020-07-28 18:05:58,801 INFO L280 TraceCheckUtils]: 7: Hoare triple {2731#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {2731#true} is VALID [2020-07-28 18:05:58,801 INFO L280 TraceCheckUtils]: 8: Hoare triple {2731#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {2731#true} is VALID [2020-07-28 18:05:58,802 INFO L280 TraceCheckUtils]: 9: Hoare triple {2731#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {2731#true} is VALID [2020-07-28 18:05:58,802 INFO L280 TraceCheckUtils]: 10: Hoare triple {2731#true} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {2731#true} is VALID [2020-07-28 18:05:58,802 INFO L280 TraceCheckUtils]: 11: Hoare triple {2731#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {2731#true} is VALID [2020-07-28 18:05:58,803 INFO L280 TraceCheckUtils]: 12: Hoare triple {2731#true} assume !(dll_create_~len > 0); {2731#true} is VALID [2020-07-28 18:05:58,803 INFO L280 TraceCheckUtils]: 13: Hoare triple {2731#true} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {2731#true} is VALID [2020-07-28 18:05:58,803 INFO L280 TraceCheckUtils]: 14: Hoare triple {2731#true} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {2731#true} is VALID [2020-07-28 18:05:58,803 INFO L280 TraceCheckUtils]: 15: Hoare triple {2731#true} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {2731#true} is VALID [2020-07-28 18:05:58,804 INFO L280 TraceCheckUtils]: 16: Hoare triple {2731#true} assume !(dll_update_at_~index > 0); {2731#true} is VALID [2020-07-28 18:05:58,804 INFO L280 TraceCheckUtils]: 17: Hoare triple {2731#true} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {2731#true} is VALID [2020-07-28 18:05:58,804 INFO L280 TraceCheckUtils]: 18: Hoare triple {2731#true} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {2731#true} is VALID [2020-07-28 18:05:58,804 INFO L280 TraceCheckUtils]: 19: Hoare triple {2731#true} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {2731#true} is VALID [2020-07-28 18:05:58,804 INFO L280 TraceCheckUtils]: 20: Hoare triple {2731#true} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {2731#true} is VALID [2020-07-28 18:05:58,805 INFO L280 TraceCheckUtils]: 21: Hoare triple {2731#true} assume !(dll_update_at_~index > 0); {2731#true} is VALID [2020-07-28 18:05:58,805 INFO L280 TraceCheckUtils]: 22: Hoare triple {2731#true} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {2731#true} is VALID [2020-07-28 18:05:58,805 INFO L280 TraceCheckUtils]: 23: Hoare triple {2731#true} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {2731#true} is VALID [2020-07-28 18:05:58,805 INFO L280 TraceCheckUtils]: 24: Hoare triple {2731#true} assume !(main_~i~0 < main_~len~0); {2731#true} is VALID [2020-07-28 18:05:58,806 INFO L280 TraceCheckUtils]: 25: Hoare triple {2731#true} main_~i~0 := 0; {2733#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:58,807 INFO L280 TraceCheckUtils]: 26: Hoare triple {2733#(= 0 ULTIMATE.start_main_~i~0)} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {2734#(= 0 ULTIMATE.start_dll_get_data_at_~index)} is VALID [2020-07-28 18:05:58,808 INFO L280 TraceCheckUtils]: 27: Hoare triple {2734#(= 0 ULTIMATE.start_dll_get_data_at_~index)} assume !!(dll_get_data_at_~index > 0);call dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset := read~$Pointer$(dll_get_data_at_~head.base, 4 + dll_get_data_at_~head.offset, 4);dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;dll_get_data_at_#t~post7 := dll_get_data_at_~index;dll_get_data_at_~index := dll_get_data_at_#t~post7 - 1;havoc dll_get_data_at_#t~post7; {2732#false} is VALID [2020-07-28 18:05:58,808 INFO L280 TraceCheckUtils]: 28: Hoare triple {2732#false} assume !(dll_get_data_at_~index > 0); {2732#false} is VALID [2020-07-28 18:05:58,808 INFO L280 TraceCheckUtils]: 29: Hoare triple {2732#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {2732#false} is VALID [2020-07-28 18:05:58,809 INFO L280 TraceCheckUtils]: 30: Hoare triple {2732#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {2732#false} is VALID [2020-07-28 18:05:58,809 INFO L280 TraceCheckUtils]: 31: Hoare triple {2732#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {2732#false} is VALID [2020-07-28 18:05:58,809 INFO L280 TraceCheckUtils]: 32: Hoare triple {2732#false} assume !false; {2732#false} is VALID [2020-07-28 18:05:58,810 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2020-07-28 18:05:58,810 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1604927440] [2020-07-28 18:05:58,811 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:05:58,811 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 18:05:58,811 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [693690251] [2020-07-28 18:05:58,811 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 18:05:58,811 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:05:58,811 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 18:05:58,843 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:58,843 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 18:05:58,843 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:05:58,844 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 18:05:58,844 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 18:05:58,844 INFO L87 Difference]: Start difference. First operand 47 states and 55 transitions. Second operand 4 states. [2020-07-28 18:05:59,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:59,179 INFO L93 Difference]: Finished difference Result 64 states and 74 transitions. [2020-07-28 18:05:59,179 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 18:05:59,179 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 18:05:59,180 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:05:59,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 18:05:59,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 50 transitions. [2020-07-28 18:05:59,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 18:05:59,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 50 transitions. [2020-07-28 18:05:59,182 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 50 transitions. [2020-07-28 18:05:59,234 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:59,236 INFO L225 Difference]: With dead ends: 64 [2020-07-28 18:05:59,236 INFO L226 Difference]: Without dead ends: 56 [2020-07-28 18:05:59,237 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:05:59,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2020-07-28 18:05:59,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 49. [2020-07-28 18:05:59,435 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:05:59,435 INFO L82 GeneralOperation]: Start isEquivalent. First operand 56 states. Second operand 49 states. [2020-07-28 18:05:59,435 INFO L74 IsIncluded]: Start isIncluded. First operand 56 states. Second operand 49 states. [2020-07-28 18:05:59,436 INFO L87 Difference]: Start difference. First operand 56 states. Second operand 49 states. [2020-07-28 18:05:59,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:59,437 INFO L93 Difference]: Finished difference Result 56 states and 63 transitions. [2020-07-28 18:05:59,437 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 63 transitions. [2020-07-28 18:05:59,438 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:59,438 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:59,438 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 56 states. [2020-07-28 18:05:59,438 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 56 states. [2020-07-28 18:05:59,439 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:05:59,440 INFO L93 Difference]: Finished difference Result 56 states and 63 transitions. [2020-07-28 18:05:59,440 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 63 transitions. [2020-07-28 18:05:59,440 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:05:59,440 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:05:59,440 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:05:59,440 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:05:59,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2020-07-28 18:05:59,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 56 transitions. [2020-07-28 18:05:59,442 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 56 transitions. Word has length 33 [2020-07-28 18:05:59,442 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:05:59,442 INFO L479 AbstractCegarLoop]: Abstraction has 49 states and 56 transitions. [2020-07-28 18:05:59,442 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 18:05:59,443 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 56 transitions. [2020-07-28 18:05:59,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2020-07-28 18:05:59,443 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:05:59,444 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:05:59,444 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 18:05:59,444 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:05:59,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:05:59,445 INFO L82 PathProgramCache]: Analyzing trace with hash 1026769210, now seen corresponding path program 1 times [2020-07-28 18:05:59,445 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:05:59,445 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1424848176] [2020-07-28 18:05:59,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:05:59,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:59,520 INFO L280 TraceCheckUtils]: 0: Hoare triple {3019#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {3019#true} is VALID [2020-07-28 18:05:59,520 INFO L280 TraceCheckUtils]: 1: Hoare triple {3019#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {3019#true} is VALID [2020-07-28 18:05:59,520 INFO L280 TraceCheckUtils]: 2: Hoare triple {3019#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {3019#true} is VALID [2020-07-28 18:05:59,521 INFO L280 TraceCheckUtils]: 3: Hoare triple {3019#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {3019#true} is VALID [2020-07-28 18:05:59,521 INFO L280 TraceCheckUtils]: 4: Hoare triple {3019#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {3019#true} is VALID [2020-07-28 18:05:59,522 INFO L280 TraceCheckUtils]: 5: Hoare triple {3019#true} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {3019#true} is VALID [2020-07-28 18:05:59,522 INFO L280 TraceCheckUtils]: 6: Hoare triple {3019#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {3019#true} is VALID [2020-07-28 18:05:59,522 INFO L280 TraceCheckUtils]: 7: Hoare triple {3019#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {3019#true} is VALID [2020-07-28 18:05:59,522 INFO L280 TraceCheckUtils]: 8: Hoare triple {3019#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {3019#true} is VALID [2020-07-28 18:05:59,523 INFO L280 TraceCheckUtils]: 9: Hoare triple {3019#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {3019#true} is VALID [2020-07-28 18:05:59,523 INFO L280 TraceCheckUtils]: 10: Hoare triple {3019#true} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {3019#true} is VALID [2020-07-28 18:05:59,524 INFO L280 TraceCheckUtils]: 11: Hoare triple {3019#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {3019#true} is VALID [2020-07-28 18:05:59,524 INFO L280 TraceCheckUtils]: 12: Hoare triple {3019#true} assume !(dll_create_~len > 0); {3019#true} is VALID [2020-07-28 18:05:59,524 INFO L280 TraceCheckUtils]: 13: Hoare triple {3019#true} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {3019#true} is VALID [2020-07-28 18:05:59,524 INFO L280 TraceCheckUtils]: 14: Hoare triple {3019#true} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {3019#true} is VALID [2020-07-28 18:05:59,525 INFO L280 TraceCheckUtils]: 15: Hoare triple {3019#true} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3019#true} is VALID [2020-07-28 18:05:59,525 INFO L280 TraceCheckUtils]: 16: Hoare triple {3019#true} assume !(dll_update_at_~index > 0); {3019#true} is VALID [2020-07-28 18:05:59,525 INFO L280 TraceCheckUtils]: 17: Hoare triple {3019#true} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3019#true} is VALID [2020-07-28 18:05:59,525 INFO L280 TraceCheckUtils]: 18: Hoare triple {3019#true} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3019#true} is VALID [2020-07-28 18:05:59,525 INFO L280 TraceCheckUtils]: 19: Hoare triple {3019#true} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3019#true} is VALID [2020-07-28 18:05:59,526 INFO L280 TraceCheckUtils]: 20: Hoare triple {3019#true} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {3019#true} is VALID [2020-07-28 18:05:59,526 INFO L280 TraceCheckUtils]: 21: Hoare triple {3019#true} assume !(dll_update_at_~index > 0); {3019#true} is VALID [2020-07-28 18:05:59,527 INFO L280 TraceCheckUtils]: 22: Hoare triple {3019#true} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3019#true} is VALID [2020-07-28 18:05:59,527 INFO L280 TraceCheckUtils]: 23: Hoare triple {3019#true} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3019#true} is VALID [2020-07-28 18:05:59,528 INFO L280 TraceCheckUtils]: 24: Hoare triple {3019#true} assume !(main_~i~0 < main_~len~0); {3019#true} is VALID [2020-07-28 18:05:59,529 INFO L280 TraceCheckUtils]: 25: Hoare triple {3019#true} main_~i~0 := 0; {3021#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,530 INFO L280 TraceCheckUtils]: 26: Hoare triple {3021#(= 0 ULTIMATE.start_main_~i~0)} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {3021#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,530 INFO L280 TraceCheckUtils]: 27: Hoare triple {3021#(= 0 ULTIMATE.start_main_~i~0)} assume !(dll_get_data_at_~index > 0); {3021#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,531 INFO L280 TraceCheckUtils]: 28: Hoare triple {3021#(= 0 ULTIMATE.start_main_~i~0)} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {3021#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,532 INFO L280 TraceCheckUtils]: 29: Hoare triple {3021#(= 0 ULTIMATE.start_main_~i~0)} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {3021#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,533 INFO L280 TraceCheckUtils]: 30: Hoare triple {3021#(= 0 ULTIMATE.start_main_~i~0)} assume !(main_~expected~0 != main_#t~ret14);havoc main_#t~ret14; {3021#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,534 INFO L280 TraceCheckUtils]: 31: Hoare triple {3021#(= 0 ULTIMATE.start_main_~i~0)} main_#t~post13 := main_~i~0;main_~i~0 := 1 + main_#t~post13;havoc main_#t~post13; {3022#(<= 1 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,536 INFO L280 TraceCheckUtils]: 32: Hoare triple {3022#(<= 1 ULTIMATE.start_main_~i~0)} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {3023#(<= 1 ULTIMATE.start_dll_get_data_at_~index)} is VALID [2020-07-28 18:05:59,537 INFO L280 TraceCheckUtils]: 33: Hoare triple {3023#(<= 1 ULTIMATE.start_dll_get_data_at_~index)} assume !(dll_get_data_at_~index > 0); {3020#false} is VALID [2020-07-28 18:05:59,537 INFO L280 TraceCheckUtils]: 34: Hoare triple {3020#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {3020#false} is VALID [2020-07-28 18:05:59,537 INFO L280 TraceCheckUtils]: 35: Hoare triple {3020#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {3020#false} is VALID [2020-07-28 18:05:59,538 INFO L280 TraceCheckUtils]: 36: Hoare triple {3020#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {3020#false} is VALID [2020-07-28 18:05:59,538 INFO L280 TraceCheckUtils]: 37: Hoare triple {3020#false} assume !false; {3020#false} is VALID [2020-07-28 18:05:59,540 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 3 proven. 2 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2020-07-28 18:05:59,540 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1424848176] [2020-07-28 18:05:59,540 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1221367669] [2020-07-28 18:05:59,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:05:59,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:59,620 INFO L263 TraceCheckSpWp]: Trace formula consists of 205 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-28 18:05:59,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:05:59,639 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 18:05:59,761 INFO L280 TraceCheckUtils]: 0: Hoare triple {3019#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {3019#true} is VALID [2020-07-28 18:05:59,761 INFO L280 TraceCheckUtils]: 1: Hoare triple {3019#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {3019#true} is VALID [2020-07-28 18:05:59,761 INFO L280 TraceCheckUtils]: 2: Hoare triple {3019#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {3019#true} is VALID [2020-07-28 18:05:59,762 INFO L280 TraceCheckUtils]: 3: Hoare triple {3019#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {3019#true} is VALID [2020-07-28 18:05:59,762 INFO L280 TraceCheckUtils]: 4: Hoare triple {3019#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {3019#true} is VALID [2020-07-28 18:05:59,762 INFO L280 TraceCheckUtils]: 5: Hoare triple {3019#true} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {3019#true} is VALID [2020-07-28 18:05:59,762 INFO L280 TraceCheckUtils]: 6: Hoare triple {3019#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {3019#true} is VALID [2020-07-28 18:05:59,763 INFO L280 TraceCheckUtils]: 7: Hoare triple {3019#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {3019#true} is VALID [2020-07-28 18:05:59,763 INFO L280 TraceCheckUtils]: 8: Hoare triple {3019#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {3019#true} is VALID [2020-07-28 18:05:59,763 INFO L280 TraceCheckUtils]: 9: Hoare triple {3019#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {3019#true} is VALID [2020-07-28 18:05:59,763 INFO L280 TraceCheckUtils]: 10: Hoare triple {3019#true} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {3019#true} is VALID [2020-07-28 18:05:59,763 INFO L280 TraceCheckUtils]: 11: Hoare triple {3019#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {3019#true} is VALID [2020-07-28 18:05:59,764 INFO L280 TraceCheckUtils]: 12: Hoare triple {3019#true} assume !(dll_create_~len > 0); {3019#true} is VALID [2020-07-28 18:05:59,764 INFO L280 TraceCheckUtils]: 13: Hoare triple {3019#true} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {3019#true} is VALID [2020-07-28 18:05:59,764 INFO L280 TraceCheckUtils]: 14: Hoare triple {3019#true} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {3019#true} is VALID [2020-07-28 18:05:59,764 INFO L280 TraceCheckUtils]: 15: Hoare triple {3019#true} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3019#true} is VALID [2020-07-28 18:05:59,765 INFO L280 TraceCheckUtils]: 16: Hoare triple {3019#true} assume !(dll_update_at_~index > 0); {3019#true} is VALID [2020-07-28 18:05:59,765 INFO L280 TraceCheckUtils]: 17: Hoare triple {3019#true} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3019#true} is VALID [2020-07-28 18:05:59,765 INFO L280 TraceCheckUtils]: 18: Hoare triple {3019#true} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3019#true} is VALID [2020-07-28 18:05:59,765 INFO L280 TraceCheckUtils]: 19: Hoare triple {3019#true} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3019#true} is VALID [2020-07-28 18:05:59,766 INFO L280 TraceCheckUtils]: 20: Hoare triple {3019#true} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {3019#true} is VALID [2020-07-28 18:05:59,766 INFO L280 TraceCheckUtils]: 21: Hoare triple {3019#true} assume !(dll_update_at_~index > 0); {3019#true} is VALID [2020-07-28 18:05:59,766 INFO L280 TraceCheckUtils]: 22: Hoare triple {3019#true} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3019#true} is VALID [2020-07-28 18:05:59,766 INFO L280 TraceCheckUtils]: 23: Hoare triple {3019#true} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3019#true} is VALID [2020-07-28 18:05:59,766 INFO L280 TraceCheckUtils]: 24: Hoare triple {3019#true} assume !(main_~i~0 < main_~len~0); {3019#true} is VALID [2020-07-28 18:05:59,767 INFO L280 TraceCheckUtils]: 25: Hoare triple {3019#true} main_~i~0 := 0; {3102#(<= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,768 INFO L280 TraceCheckUtils]: 26: Hoare triple {3102#(<= 0 ULTIMATE.start_main_~i~0)} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {3102#(<= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,768 INFO L280 TraceCheckUtils]: 27: Hoare triple {3102#(<= 0 ULTIMATE.start_main_~i~0)} assume !(dll_get_data_at_~index > 0); {3102#(<= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,769 INFO L280 TraceCheckUtils]: 28: Hoare triple {3102#(<= 0 ULTIMATE.start_main_~i~0)} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {3102#(<= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,770 INFO L280 TraceCheckUtils]: 29: Hoare triple {3102#(<= 0 ULTIMATE.start_main_~i~0)} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {3102#(<= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,770 INFO L280 TraceCheckUtils]: 30: Hoare triple {3102#(<= 0 ULTIMATE.start_main_~i~0)} assume !(main_~expected~0 != main_#t~ret14);havoc main_#t~ret14; {3102#(<= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,771 INFO L280 TraceCheckUtils]: 31: Hoare triple {3102#(<= 0 ULTIMATE.start_main_~i~0)} main_#t~post13 := main_~i~0;main_~i~0 := 1 + main_#t~post13;havoc main_#t~post13; {3022#(<= 1 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:05:59,772 INFO L280 TraceCheckUtils]: 32: Hoare triple {3022#(<= 1 ULTIMATE.start_main_~i~0)} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {3023#(<= 1 ULTIMATE.start_dll_get_data_at_~index)} is VALID [2020-07-28 18:05:59,773 INFO L280 TraceCheckUtils]: 33: Hoare triple {3023#(<= 1 ULTIMATE.start_dll_get_data_at_~index)} assume !(dll_get_data_at_~index > 0); {3020#false} is VALID [2020-07-28 18:05:59,773 INFO L280 TraceCheckUtils]: 34: Hoare triple {3020#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {3020#false} is VALID [2020-07-28 18:05:59,773 INFO L280 TraceCheckUtils]: 35: Hoare triple {3020#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {3020#false} is VALID [2020-07-28 18:05:59,773 INFO L280 TraceCheckUtils]: 36: Hoare triple {3020#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {3020#false} is VALID [2020-07-28 18:05:59,773 INFO L280 TraceCheckUtils]: 37: Hoare triple {3020#false} assume !false; {3020#false} is VALID [2020-07-28 18:05:59,775 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2020-07-28 18:05:59,775 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 18:05:59,775 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 6 [2020-07-28 18:05:59,775 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1993985063] [2020-07-28 18:05:59,776 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 38 [2020-07-28 18:05:59,776 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:05:59,776 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 18:05:59,816 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:05:59,816 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 18:05:59,816 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:05:59,816 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 18:05:59,816 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2020-07-28 18:05:59,817 INFO L87 Difference]: Start difference. First operand 49 states and 56 transitions. Second operand 6 states. [2020-07-28 18:06:00,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:06:00,213 INFO L93 Difference]: Finished difference Result 64 states and 73 transitions. [2020-07-28 18:06:00,213 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 18:06:00,213 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 38 [2020-07-28 18:06:00,213 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:06:00,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 18:06:00,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 50 transitions. [2020-07-28 18:06:00,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 18:06:00,215 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 50 transitions. [2020-07-28 18:06:00,215 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 50 transitions. [2020-07-28 18:06:00,276 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:06:00,277 INFO L225 Difference]: With dead ends: 64 [2020-07-28 18:06:00,277 INFO L226 Difference]: Without dead ends: 56 [2020-07-28 18:06:00,278 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 38 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=26, Unknown=0, NotChecked=0, Total=42 [2020-07-28 18:06:00,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2020-07-28 18:06:00,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 50. [2020-07-28 18:06:00,466 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:06:00,467 INFO L82 GeneralOperation]: Start isEquivalent. First operand 56 states. Second operand 50 states. [2020-07-28 18:06:00,467 INFO L74 IsIncluded]: Start isIncluded. First operand 56 states. Second operand 50 states. [2020-07-28 18:06:00,467 INFO L87 Difference]: Start difference. First operand 56 states. Second operand 50 states. [2020-07-28 18:06:00,468 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:06:00,469 INFO L93 Difference]: Finished difference Result 56 states and 63 transitions. [2020-07-28 18:06:00,469 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 63 transitions. [2020-07-28 18:06:00,469 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:06:00,469 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:06:00,469 INFO L74 IsIncluded]: Start isIncluded. First operand 50 states. Second operand 56 states. [2020-07-28 18:06:00,469 INFO L87 Difference]: Start difference. First operand 50 states. Second operand 56 states. [2020-07-28 18:06:00,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:06:00,470 INFO L93 Difference]: Finished difference Result 56 states and 63 transitions. [2020-07-28 18:06:00,470 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 63 transitions. [2020-07-28 18:06:00,471 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:06:00,471 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:06:00,471 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:06:00,471 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:06:00,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 50 states. [2020-07-28 18:06:00,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 57 transitions. [2020-07-28 18:06:00,472 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 57 transitions. Word has length 38 [2020-07-28 18:06:00,473 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:06:00,473 INFO L479 AbstractCegarLoop]: Abstraction has 50 states and 57 transitions. [2020-07-28 18:06:00,473 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 18:06:00,473 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 57 transitions. [2020-07-28 18:06:00,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2020-07-28 18:06:00,473 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:06:00,474 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:06:00,683 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,7 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:06:00,684 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:06:00,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:06:00,685 INFO L82 PathProgramCache]: Analyzing trace with hash 233107481, now seen corresponding path program 4 times [2020-07-28 18:06:00,685 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:06:00,686 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1421575046] [2020-07-28 18:06:00,686 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:06:00,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:06:00,754 INFO L280 TraceCheckUtils]: 0: Hoare triple {3422#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {3422#true} is VALID [2020-07-28 18:06:00,755 INFO L280 TraceCheckUtils]: 1: Hoare triple {3422#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,756 INFO L280 TraceCheckUtils]: 2: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,756 INFO L280 TraceCheckUtils]: 3: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,757 INFO L280 TraceCheckUtils]: 4: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,757 INFO L280 TraceCheckUtils]: 5: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,758 INFO L280 TraceCheckUtils]: 6: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,758 INFO L280 TraceCheckUtils]: 7: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,759 INFO L280 TraceCheckUtils]: 8: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,759 INFO L280 TraceCheckUtils]: 9: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,760 INFO L280 TraceCheckUtils]: 10: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,760 INFO L280 TraceCheckUtils]: 11: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,761 INFO L280 TraceCheckUtils]: 12: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume !(dll_create_~len > 0); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,761 INFO L280 TraceCheckUtils]: 13: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:00,762 INFO L280 TraceCheckUtils]: 14: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {3425#(and (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} is VALID [2020-07-28 18:06:00,763 INFO L280 TraceCheckUtils]: 15: Hoare triple {3425#(and (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3425#(and (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} is VALID [2020-07-28 18:06:00,764 INFO L280 TraceCheckUtils]: 16: Hoare triple {3425#(and (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} assume !(dll_update_at_~index > 0); {3425#(and (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} is VALID [2020-07-28 18:06:00,765 INFO L280 TraceCheckUtils]: 17: Hoare triple {3425#(and (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3425#(and (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} is VALID [2020-07-28 18:06:00,765 INFO L280 TraceCheckUtils]: 18: Hoare triple {3425#(and (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3426#(<= ULTIMATE.start_main_~len~0 (+ ULTIMATE.start_main_~i~0 1))} is VALID [2020-07-28 18:06:00,766 INFO L280 TraceCheckUtils]: 19: Hoare triple {3426#(<= ULTIMATE.start_main_~len~0 (+ ULTIMATE.start_main_~i~0 1))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3426#(<= ULTIMATE.start_main_~len~0 (+ ULTIMATE.start_main_~i~0 1))} is VALID [2020-07-28 18:06:00,766 INFO L280 TraceCheckUtils]: 20: Hoare triple {3426#(<= ULTIMATE.start_main_~len~0 (+ ULTIMATE.start_main_~i~0 1))} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {3426#(<= ULTIMATE.start_main_~len~0 (+ ULTIMATE.start_main_~i~0 1))} is VALID [2020-07-28 18:06:00,767 INFO L280 TraceCheckUtils]: 21: Hoare triple {3426#(<= ULTIMATE.start_main_~len~0 (+ ULTIMATE.start_main_~i~0 1))} assume !(dll_update_at_~index > 0); {3426#(<= ULTIMATE.start_main_~len~0 (+ ULTIMATE.start_main_~i~0 1))} is VALID [2020-07-28 18:06:00,767 INFO L280 TraceCheckUtils]: 22: Hoare triple {3426#(<= ULTIMATE.start_main_~len~0 (+ ULTIMATE.start_main_~i~0 1))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3426#(<= ULTIMATE.start_main_~len~0 (+ ULTIMATE.start_main_~i~0 1))} is VALID [2020-07-28 18:06:00,768 INFO L280 TraceCheckUtils]: 23: Hoare triple {3426#(<= ULTIMATE.start_main_~len~0 (+ ULTIMATE.start_main_~i~0 1))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3427#(<= ULTIMATE.start_main_~len~0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:06:00,769 INFO L280 TraceCheckUtils]: 24: Hoare triple {3427#(<= ULTIMATE.start_main_~len~0 ULTIMATE.start_main_~i~0)} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3423#false} is VALID [2020-07-28 18:06:00,769 INFO L280 TraceCheckUtils]: 25: Hoare triple {3423#false} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {3423#false} is VALID [2020-07-28 18:06:00,770 INFO L280 TraceCheckUtils]: 26: Hoare triple {3423#false} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {3423#false} is VALID [2020-07-28 18:06:00,770 INFO L280 TraceCheckUtils]: 27: Hoare triple {3423#false} assume !(dll_update_at_~index > 0); {3423#false} is VALID [2020-07-28 18:06:00,770 INFO L280 TraceCheckUtils]: 28: Hoare triple {3423#false} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3423#false} is VALID [2020-07-28 18:06:00,770 INFO L280 TraceCheckUtils]: 29: Hoare triple {3423#false} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3423#false} is VALID [2020-07-28 18:06:00,770 INFO L280 TraceCheckUtils]: 30: Hoare triple {3423#false} assume !(main_~i~0 < main_~len~0); {3423#false} is VALID [2020-07-28 18:06:00,770 INFO L280 TraceCheckUtils]: 31: Hoare triple {3423#false} main_~i~0 := 0; {3423#false} is VALID [2020-07-28 18:06:00,771 INFO L280 TraceCheckUtils]: 32: Hoare triple {3423#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {3423#false} is VALID [2020-07-28 18:06:00,771 INFO L280 TraceCheckUtils]: 33: Hoare triple {3423#false} assume !(dll_get_data_at_~index > 0); {3423#false} is VALID [2020-07-28 18:06:00,771 INFO L280 TraceCheckUtils]: 34: Hoare triple {3423#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {3423#false} is VALID [2020-07-28 18:06:00,771 INFO L280 TraceCheckUtils]: 35: Hoare triple {3423#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {3423#false} is VALID [2020-07-28 18:06:00,771 INFO L280 TraceCheckUtils]: 36: Hoare triple {3423#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {3423#false} is VALID [2020-07-28 18:06:00,772 INFO L280 TraceCheckUtils]: 37: Hoare triple {3423#false} assume !false; {3423#false} is VALID [2020-07-28 18:06:00,773 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 17 proven. 6 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 18:06:00,774 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1421575046] [2020-07-28 18:06:00,774 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1781410711] [2020-07-28 18:06:00,774 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 8 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:06:00,842 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2020-07-28 18:06:00,842 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2020-07-28 18:06:00,844 INFO L263 TraceCheckSpWp]: Trace formula consists of 188 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-28 18:06:00,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:06:00,866 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 18:06:01,056 INFO L280 TraceCheckUtils]: 0: Hoare triple {3422#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {3422#true} is VALID [2020-07-28 18:06:01,057 INFO L280 TraceCheckUtils]: 1: Hoare triple {3422#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,058 INFO L280 TraceCheckUtils]: 2: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,069 INFO L280 TraceCheckUtils]: 3: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,071 INFO L280 TraceCheckUtils]: 4: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,071 INFO L280 TraceCheckUtils]: 5: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,072 INFO L280 TraceCheckUtils]: 6: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,073 INFO L280 TraceCheckUtils]: 7: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,073 INFO L280 TraceCheckUtils]: 8: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,074 INFO L280 TraceCheckUtils]: 9: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,074 INFO L280 TraceCheckUtils]: 10: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,075 INFO L280 TraceCheckUtils]: 11: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,076 INFO L280 TraceCheckUtils]: 12: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} assume !(dll_create_~len > 0); {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,076 INFO L280 TraceCheckUtils]: 13: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {3424#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:01,077 INFO L280 TraceCheckUtils]: 14: Hoare triple {3424#(<= ULTIMATE.start_main_~len~0 2)} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {3473#(and (<= ULTIMATE.start_main_~len~0 2) (<= 0 ULTIMATE.start_main_~i~0))} is VALID [2020-07-28 18:06:01,078 INFO L280 TraceCheckUtils]: 15: Hoare triple {3473#(and (<= ULTIMATE.start_main_~len~0 2) (<= 0 ULTIMATE.start_main_~i~0))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3473#(and (<= ULTIMATE.start_main_~len~0 2) (<= 0 ULTIMATE.start_main_~i~0))} is VALID [2020-07-28 18:06:01,079 INFO L280 TraceCheckUtils]: 16: Hoare triple {3473#(and (<= ULTIMATE.start_main_~len~0 2) (<= 0 ULTIMATE.start_main_~i~0))} assume !(dll_update_at_~index > 0); {3473#(and (<= ULTIMATE.start_main_~len~0 2) (<= 0 ULTIMATE.start_main_~i~0))} is VALID [2020-07-28 18:06:01,080 INFO L280 TraceCheckUtils]: 17: Hoare triple {3473#(and (<= ULTIMATE.start_main_~len~0 2) (<= 0 ULTIMATE.start_main_~i~0))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3473#(and (<= ULTIMATE.start_main_~len~0 2) (<= 0 ULTIMATE.start_main_~i~0))} is VALID [2020-07-28 18:06:01,081 INFO L280 TraceCheckUtils]: 18: Hoare triple {3473#(and (<= ULTIMATE.start_main_~len~0 2) (<= 0 ULTIMATE.start_main_~i~0))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3486#(and (<= 1 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} is VALID [2020-07-28 18:06:01,082 INFO L280 TraceCheckUtils]: 19: Hoare triple {3486#(and (<= 1 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3486#(and (<= 1 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} is VALID [2020-07-28 18:06:01,083 INFO L280 TraceCheckUtils]: 20: Hoare triple {3486#(and (<= 1 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {3486#(and (<= 1 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} is VALID [2020-07-28 18:06:01,084 INFO L280 TraceCheckUtils]: 21: Hoare triple {3486#(and (<= 1 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} assume !(dll_update_at_~index > 0); {3486#(and (<= 1 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} is VALID [2020-07-28 18:06:01,086 INFO L280 TraceCheckUtils]: 22: Hoare triple {3486#(and (<= 1 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3486#(and (<= 1 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} is VALID [2020-07-28 18:06:01,087 INFO L280 TraceCheckUtils]: 23: Hoare triple {3486#(and (<= 1 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3502#(and (<= 2 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} is VALID [2020-07-28 18:06:01,088 INFO L280 TraceCheckUtils]: 24: Hoare triple {3502#(and (<= 2 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_main_~len~0 2))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3423#false} is VALID [2020-07-28 18:06:01,089 INFO L280 TraceCheckUtils]: 25: Hoare triple {3423#false} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {3423#false} is VALID [2020-07-28 18:06:01,089 INFO L280 TraceCheckUtils]: 26: Hoare triple {3423#false} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {3423#false} is VALID [2020-07-28 18:06:01,089 INFO L280 TraceCheckUtils]: 27: Hoare triple {3423#false} assume !(dll_update_at_~index > 0); {3423#false} is VALID [2020-07-28 18:06:01,089 INFO L280 TraceCheckUtils]: 28: Hoare triple {3423#false} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3423#false} is VALID [2020-07-28 18:06:01,089 INFO L280 TraceCheckUtils]: 29: Hoare triple {3423#false} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3423#false} is VALID [2020-07-28 18:06:01,090 INFO L280 TraceCheckUtils]: 30: Hoare triple {3423#false} assume !(main_~i~0 < main_~len~0); {3423#false} is VALID [2020-07-28 18:06:01,090 INFO L280 TraceCheckUtils]: 31: Hoare triple {3423#false} main_~i~0 := 0; {3423#false} is VALID [2020-07-28 18:06:01,090 INFO L280 TraceCheckUtils]: 32: Hoare triple {3423#false} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {3423#false} is VALID [2020-07-28 18:06:01,090 INFO L280 TraceCheckUtils]: 33: Hoare triple {3423#false} assume !(dll_get_data_at_~index > 0); {3423#false} is VALID [2020-07-28 18:06:01,091 INFO L280 TraceCheckUtils]: 34: Hoare triple {3423#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {3423#false} is VALID [2020-07-28 18:06:01,091 INFO L280 TraceCheckUtils]: 35: Hoare triple {3423#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {3423#false} is VALID [2020-07-28 18:06:01,091 INFO L280 TraceCheckUtils]: 36: Hoare triple {3423#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {3423#false} is VALID [2020-07-28 18:06:01,091 INFO L280 TraceCheckUtils]: 37: Hoare triple {3423#false} assume !false; {3423#false} is VALID [2020-07-28 18:06:01,094 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 18:06:01,095 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2020-07-28 18:06:01,096 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 9 [2020-07-28 18:06:01,096 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1822934305] [2020-07-28 18:06:01,097 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 38 [2020-07-28 18:06:01,097 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:06:01,098 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 18:06:01,138 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:06:01,138 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 18:06:01,138 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:06:01,138 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 18:06:01,138 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 18:06:01,139 INFO L87 Difference]: Start difference. First operand 50 states and 57 transitions. Second operand 6 states. [2020-07-28 18:06:01,460 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:06:01,460 INFO L93 Difference]: Finished difference Result 70 states and 79 transitions. [2020-07-28 18:06:01,460 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 18:06:01,461 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 38 [2020-07-28 18:06:01,461 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:06:01,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 18:06:01,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 55 transitions. [2020-07-28 18:06:01,463 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 18:06:01,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 55 transitions. [2020-07-28 18:06:01,464 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 55 transitions. [2020-07-28 18:06:01,536 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:06:01,537 INFO L225 Difference]: With dead ends: 70 [2020-07-28 18:06:01,537 INFO L226 Difference]: Without dead ends: 40 [2020-07-28 18:06:01,538 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 18:06:01,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2020-07-28 18:06:01,696 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 40. [2020-07-28 18:06:01,696 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:06:01,696 INFO L82 GeneralOperation]: Start isEquivalent. First operand 40 states. Second operand 40 states. [2020-07-28 18:06:01,697 INFO L74 IsIncluded]: Start isIncluded. First operand 40 states. Second operand 40 states. [2020-07-28 18:06:01,697 INFO L87 Difference]: Start difference. First operand 40 states. Second operand 40 states. [2020-07-28 18:06:01,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:06:01,698 INFO L93 Difference]: Finished difference Result 40 states and 42 transitions. [2020-07-28 18:06:01,698 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 42 transitions. [2020-07-28 18:06:01,698 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:06:01,698 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:06:01,699 INFO L74 IsIncluded]: Start isIncluded. First operand 40 states. Second operand 40 states. [2020-07-28 18:06:01,699 INFO L87 Difference]: Start difference. First operand 40 states. Second operand 40 states. [2020-07-28 18:06:01,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:06:01,700 INFO L93 Difference]: Finished difference Result 40 states and 42 transitions. [2020-07-28 18:06:01,700 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 42 transitions. [2020-07-28 18:06:01,701 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:06:01,701 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:06:01,701 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:06:01,702 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:06:01,702 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 40 states. [2020-07-28 18:06:01,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 42 transitions. [2020-07-28 18:06:01,703 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 42 transitions. Word has length 38 [2020-07-28 18:06:01,703 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:06:01,703 INFO L479 AbstractCegarLoop]: Abstraction has 40 states and 42 transitions. [2020-07-28 18:06:01,704 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 18:06:01,704 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 42 transitions. [2020-07-28 18:06:01,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2020-07-28 18:06:01,705 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:06:01,705 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:06:01,905 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,8 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:06:01,906 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:06:01,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:06:01,906 INFO L82 PathProgramCache]: Analyzing trace with hash 1816728545, now seen corresponding path program 1 times [2020-07-28 18:06:01,906 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:06:01,906 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1991678354] [2020-07-28 18:06:01,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:06:01,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:06:02,841 INFO L280 TraceCheckUtils]: 0: Hoare triple {3787#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {3787#true} is VALID [2020-07-28 18:06:02,843 INFO L280 TraceCheckUtils]: 1: Hoare triple {3787#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {3789#(<= 2 ULTIMATE.start_main_~len~0)} is VALID [2020-07-28 18:06:02,844 INFO L280 TraceCheckUtils]: 2: Hoare triple {3789#(<= 2 ULTIMATE.start_main_~len~0)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {3790#(and (<= 2 ULTIMATE.start_main_~len~0) (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base)))} is VALID [2020-07-28 18:06:02,845 INFO L280 TraceCheckUtils]: 3: Hoare triple {3790#(and (<= 2 ULTIMATE.start_main_~len~0) (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base)))} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {3790#(and (<= 2 ULTIMATE.start_main_~len~0) (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base)))} is VALID [2020-07-28 18:06:02,846 INFO L280 TraceCheckUtils]: 4: Hoare triple {3790#(and (<= 2 ULTIMATE.start_main_~len~0) (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base)))} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {3790#(and (<= 2 ULTIMATE.start_main_~len~0) (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base)))} is VALID [2020-07-28 18:06:02,847 INFO L280 TraceCheckUtils]: 5: Hoare triple {3790#(and (<= 2 ULTIMATE.start_main_~len~0) (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base)))} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {3790#(and (<= 2 ULTIMATE.start_main_~len~0) (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base)))} is VALID [2020-07-28 18:06:02,848 INFO L280 TraceCheckUtils]: 6: Hoare triple {3790#(and (<= 2 ULTIMATE.start_main_~len~0) (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base)))} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {3791#(and (<= 2 ULTIMATE.start_main_~len~0) (= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base)))} is VALID [2020-07-28 18:06:02,849 INFO L280 TraceCheckUtils]: 7: Hoare triple {3791#(and (<= 2 ULTIMATE.start_main_~len~0) (= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base)))} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {3792#(and (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (<= 2 ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} is VALID [2020-07-28 18:06:02,850 INFO L280 TraceCheckUtils]: 8: Hoare triple {3792#(and (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (<= 2 ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {3792#(and (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (<= 2 ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} is VALID [2020-07-28 18:06:02,852 INFO L280 TraceCheckUtils]: 9: Hoare triple {3792#(and (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (<= 2 ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {3793#(and (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4))) (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (<= 2 ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} is VALID [2020-07-28 18:06:02,853 INFO L280 TraceCheckUtils]: 10: Hoare triple {3793#(and (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4))) (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (<= 2 ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {3794#(and (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:06:02,855 INFO L280 TraceCheckUtils]: 11: Hoare triple {3794#(and (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (<= 2 ULTIMATE.start_main_~len~0))} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {3795#(and (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) 4))) (<= 2 ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} is VALID [2020-07-28 18:06:02,855 INFO L280 TraceCheckUtils]: 12: Hoare triple {3795#(and (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) 4))) (<= 2 ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} assume !(dll_create_~len > 0); {3795#(and (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) 4))) (<= 2 ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} is VALID [2020-07-28 18:06:02,856 INFO L280 TraceCheckUtils]: 13: Hoare triple {3795#(and (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) 4))) (<= 2 ULTIMATE.start_main_~len~0) (= 0 ULTIMATE.start_dll_create_~head~0.offset))} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {3796#(and (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) 4) |ULTIMATE.start_dll_create_#res.base|)) (<= 2 ULTIMATE.start_main_~len~0) (= 0 |ULTIMATE.start_dll_create_#res.offset|))} is VALID [2020-07-28 18:06:02,858 INFO L280 TraceCheckUtils]: 14: Hoare triple {3796#(and (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) 4) |ULTIMATE.start_dll_create_#res.base|)) (<= 2 ULTIMATE.start_main_~len~0) (= 0 |ULTIMATE.start_dll_create_#res.offset|))} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {3797#(and (= 0 ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:06:02,859 INFO L280 TraceCheckUtils]: 15: Hoare triple {3797#(and (= 0 ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3798#(and (= 0 ULTIMATE.start_main_~s~0.offset) (not (= 4 ULTIMATE.start_dll_update_at_~head.offset)) (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) 4) ULTIMATE.start_dll_update_at_~head.base)) (= 0 ULTIMATE.start_main_~i~0) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:06:02,860 INFO L280 TraceCheckUtils]: 16: Hoare triple {3798#(and (= 0 ULTIMATE.start_main_~s~0.offset) (not (= 4 ULTIMATE.start_dll_update_at_~head.offset)) (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) 4) ULTIMATE.start_dll_update_at_~head.base)) (= 0 ULTIMATE.start_main_~i~0) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (<= 2 ULTIMATE.start_main_~len~0))} assume !(dll_update_at_~index > 0); {3798#(and (= 0 ULTIMATE.start_main_~s~0.offset) (not (= 4 ULTIMATE.start_dll_update_at_~head.offset)) (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) 4) ULTIMATE.start_dll_update_at_~head.base)) (= 0 ULTIMATE.start_main_~i~0) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:06:02,862 INFO L280 TraceCheckUtils]: 17: Hoare triple {3798#(and (= 0 ULTIMATE.start_main_~s~0.offset) (not (= 4 ULTIMATE.start_dll_update_at_~head.offset)) (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) 4) ULTIMATE.start_dll_update_at_~head.base)) (= 0 ULTIMATE.start_main_~i~0) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (<= 2 ULTIMATE.start_main_~len~0))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3797#(and (= 0 ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} is VALID [2020-07-28 18:06:02,863 INFO L280 TraceCheckUtils]: 18: Hoare triple {3797#(and (= 0 ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= 2 ULTIMATE.start_main_~len~0))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3799#(and (= 0 ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (<= 2 ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~i~0 1))} is VALID [2020-07-28 18:06:02,864 INFO L280 TraceCheckUtils]: 19: Hoare triple {3799#(and (= 0 ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (<= 2 ULTIMATE.start_main_~len~0) (<= ULTIMATE.start_main_~i~0 1))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3800#(and (= (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (select |#memory_$Pointer$.offset| ULTIMATE.start_dll_update_at_~head.base)) (<= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1)) (= 0 ULTIMATE.start_main_~s~0.offset) (= (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base)) (<= (+ ULTIMATE.start_main_~i~0 2) ULTIMATE.start_dll_update_at_~data) (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) (+ ULTIMATE.start_dll_update_at_~head.offset 4)) ULTIMATE.start_main_~s~0.base)) (= 0 ULTIMATE.start_dll_update_at_~head.offset))} is VALID [2020-07-28 18:06:02,866 INFO L280 TraceCheckUtils]: 20: Hoare triple {3800#(and (= (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (select |#memory_$Pointer$.offset| ULTIMATE.start_dll_update_at_~head.base)) (<= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1)) (= 0 ULTIMATE.start_main_~s~0.offset) (= (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base)) (<= (+ ULTIMATE.start_main_~i~0 2) ULTIMATE.start_dll_update_at_~data) (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) (+ ULTIMATE.start_dll_update_at_~head.offset 4)) ULTIMATE.start_main_~s~0.base)) (= 0 ULTIMATE.start_dll_update_at_~head.offset))} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {3801#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4) ULTIMATE.start_dll_update_at_~head.base) (<= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1)) (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~i~0 2) ULTIMATE.start_dll_update_at_~data) (= (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4) ULTIMATE.start_dll_update_at_~head.offset) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)))} is VALID [2020-07-28 18:06:02,867 INFO L280 TraceCheckUtils]: 21: Hoare triple {3801#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4) ULTIMATE.start_dll_update_at_~head.base) (<= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1)) (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~i~0 2) ULTIMATE.start_dll_update_at_~data) (= (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4) ULTIMATE.start_dll_update_at_~head.offset) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)))} assume !(dll_update_at_~index > 0); {3801#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4) ULTIMATE.start_dll_update_at_~head.base) (<= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1)) (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~i~0 2) ULTIMATE.start_dll_update_at_~data) (= (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4) ULTIMATE.start_dll_update_at_~head.offset) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)))} is VALID [2020-07-28 18:06:02,869 INFO L280 TraceCheckUtils]: 22: Hoare triple {3801#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4) ULTIMATE.start_dll_update_at_~head.base) (<= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1)) (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~i~0 2) ULTIMATE.start_dll_update_at_~data) (= (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4) ULTIMATE.start_dll_update_at_~head.offset) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3802#(and (<= (+ ULTIMATE.start_main_~i~0 2) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~s~0.offset) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} is VALID [2020-07-28 18:06:02,871 INFO L280 TraceCheckUtils]: 23: Hoare triple {3802#(and (<= (+ ULTIMATE.start_main_~i~0 2) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~s~0.offset) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3803#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~i~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} is VALID [2020-07-28 18:06:02,872 INFO L280 TraceCheckUtils]: 24: Hoare triple {3803#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~i~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} assume !(main_~i~0 < main_~len~0); {3804#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} is VALID [2020-07-28 18:06:02,873 INFO L280 TraceCheckUtils]: 25: Hoare triple {3804#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} main_~i~0 := 0; {3805#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} is VALID [2020-07-28 18:06:02,874 INFO L280 TraceCheckUtils]: 26: Hoare triple {3805#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {3805#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} is VALID [2020-07-28 18:06:02,875 INFO L280 TraceCheckUtils]: 27: Hoare triple {3805#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} assume !(dll_get_data_at_~index > 0); {3805#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} is VALID [2020-07-28 18:06:02,876 INFO L280 TraceCheckUtils]: 28: Hoare triple {3805#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {3805#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} is VALID [2020-07-28 18:06:02,878 INFO L280 TraceCheckUtils]: 29: Hoare triple {3805#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {3805#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} is VALID [2020-07-28 18:06:02,879 INFO L280 TraceCheckUtils]: 30: Hoare triple {3805#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} assume !(main_~expected~0 != main_#t~ret14);havoc main_#t~ret14; {3805#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} is VALID [2020-07-28 18:06:02,880 INFO L280 TraceCheckUtils]: 31: Hoare triple {3805#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 1) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (= 0 ULTIMATE.start_main_~i~0) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 1)))} main_#t~post13 := main_~i~0;main_~i~0 := 1 + main_#t~post13;havoc main_#t~post13; {3806#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 ULTIMATE.start_main_~i~0) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 ULTIMATE.start_main_~i~0)))} is VALID [2020-07-28 18:06:02,881 INFO L280 TraceCheckUtils]: 32: Hoare triple {3806#(and (= 0 ULTIMATE.start_main_~s~0.offset) (<= (+ ULTIMATE.start_main_~len~0 ULTIMATE.start_main_~i~0) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)) (+ ULTIMATE.start_main_~len~0 ULTIMATE.start_main_~i~0)))} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {3807#(and (= 0 ULTIMATE.start_dll_get_data_at_~head.offset) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4))) ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4)))))} is VALID [2020-07-28 18:06:02,883 INFO L280 TraceCheckUtils]: 33: Hoare triple {3807#(and (= 0 ULTIMATE.start_dll_get_data_at_~head.offset) (<= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4))) ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4)))))} assume !!(dll_get_data_at_~index > 0);call dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset := read~$Pointer$(dll_get_data_at_~head.base, 4 + dll_get_data_at_~head.offset, 4);dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;dll_get_data_at_#t~post7 := dll_get_data_at_~index;dll_get_data_at_~index := dll_get_data_at_#t~post7 - 1;havoc dll_get_data_at_#t~post7; {3808#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} is VALID [2020-07-28 18:06:02,884 INFO L280 TraceCheckUtils]: 34: Hoare triple {3808#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} assume !(dll_get_data_at_~index > 0); {3808#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} is VALID [2020-07-28 18:06:02,885 INFO L280 TraceCheckUtils]: 35: Hoare triple {3808#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {3809#(and (<= |ULTIMATE.start_dll_get_data_at_#res| ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_dll_get_data_at_#res|))} is VALID [2020-07-28 18:06:02,886 INFO L280 TraceCheckUtils]: 36: Hoare triple {3809#(and (<= |ULTIMATE.start_dll_get_data_at_#res| ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_dll_get_data_at_#res|))} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {3810#(and (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_main_#t~ret14|) (< |ULTIMATE.start_main_#t~ret14| (+ ULTIMATE.start_main_~expected~0 1)))} is VALID [2020-07-28 18:06:02,887 INFO L280 TraceCheckUtils]: 37: Hoare triple {3810#(and (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_main_#t~ret14|) (< |ULTIMATE.start_main_#t~ret14| (+ ULTIMATE.start_main_~expected~0 1)))} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {3788#false} is VALID [2020-07-28 18:06:02,888 INFO L280 TraceCheckUtils]: 38: Hoare triple {3788#false} assume !false; {3788#false} is VALID [2020-07-28 18:06:02,895 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 2 proven. 20 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:06:02,896 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1991678354] [2020-07-28 18:06:02,896 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [550889019] [2020-07-28 18:06:02,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 9 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:06:02,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:06:02,966 INFO L263 TraceCheckSpWp]: Trace formula consists of 212 conjuncts, 84 conjunts are in the unsatisfiable core [2020-07-28 18:06:02,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:06:02,997 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 18:06:03,011 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2020-07-28 18:06:03,011 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:06:03,014 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:06:03,014 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2020-07-28 18:06:03,015 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:6, output treesize:5 [2020-07-28 18:06:03,017 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-28 18:06:03,017 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#valid_9|]. (= |#valid| (store |v_#valid_9| ULTIMATE.start_dll_create_~new_head~0.base 1)) [2020-07-28 18:06:03,018 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base)) [2020-07-28 18:06:03,095 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:06:03,095 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 15 [2020-07-28 18:06:03,096 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:06:03,098 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:06:03,099 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2020-07-28 18:06:03,099 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:11, output treesize:4 [2020-07-28 18:06:03,149 INFO L350 Elim1Store]: treesize reduction 27, result has 25.0 percent of original size [2020-07-28 18:06:03,150 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2020-07-28 18:06:03,151 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:06:03,158 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:06:03,158 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-28 18:06:03,159 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:23, output treesize:23 [2020-07-28 18:06:03,298 INFO L350 Elim1Store]: treesize reduction 12, result has 87.9 percent of original size [2020-07-28 18:06:03,298 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 45 treesize of output 106 [2020-07-28 18:06:03,313 INFO L342 QuantifierPusher]: Applying distributivity to a CONJUNCTION[6, 3, 2, 1] term [2020-07-28 18:06:03,313 INFO L523 QuantifierPusher]: Distributing 2 conjuncts over 6 disjuncts [2020-07-28 18:06:03,315 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:06:03,337 INFO L624 ElimStorePlain]: treesize reduction 46, result has 43.2 percent of original size [2020-07-28 18:06:03,338 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-2 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-28 18:06:03,338 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 2 variables, input treesize:45, output treesize:35 [2020-07-28 18:06:03,342 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-28 18:06:03,343 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_17|, ULTIMATE.start_dll_create_~head~0.offset]. (let ((.cse1 (select |v_#memory_$Pointer$.base_17| ULTIMATE.start_dll_create_~new_head~0.base))) (let ((.cse0 (select .cse1 (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (and (not (= ULTIMATE.start_dll_create_~new_head~0.base .cse0)) (= |#memory_$Pointer$.base| (store |v_#memory_$Pointer$.base_17| .cse0 (store (select |v_#memory_$Pointer$.base_17| .cse0) (+ ULTIMATE.start_dll_create_~head~0.offset 8) ULTIMATE.start_dll_create_~new_head~0.base))) (= 0 (select .cse1 (+ ULTIMATE.start_dll_create_~new_head~0.offset 8)))))) [2020-07-28 18:06:03,343 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ [ULTIMATE.start_dll_create_~head~0.offset]. (let ((.cse1 (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base))) (let ((.cse0 (select .cse1 (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (and (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| .cse0) (+ ULTIMATE.start_dll_create_~head~0.offset 8))) (not (= ULTIMATE.start_dll_create_~new_head~0.base .cse0)) (= 0 (select .cse1 (+ ULTIMATE.start_dll_create_~new_head~0.offset 8)))))) [2020-07-28 18:06:03,824 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-28 18:06:03,827 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-28 18:06:03,828 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-28 18:06:03,889 INFO L350 Elim1Store]: treesize reduction 24, result has 68.4 percent of original size [2020-07-28 18:06:03,890 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 4 new quantified variables, introduced 4 case distinctions, treesize of input 50 treesize of output 83 [2020-07-28 18:06:03,894 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:06:03,927 INFO L624 ElimStorePlain]: treesize reduction 44, result has 48.2 percent of original size [2020-07-28 18:06:03,932 INFO L544 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 1 dim-2 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-28 18:06:03,932 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 3 variables, input treesize:56, output treesize:38 [2020-07-28 18:06:03,938 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-28 18:06:03,938 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_18|, v_subst_2, ULTIMATE.start_dll_update_at_~head.offset]. (let ((.cse0 (select |v_#memory_$Pointer$.base_18| ULTIMATE.start_main_~s~0.base))) (let ((.cse1 (select .cse0 (+ ULTIMATE.start_main_~s~0.offset 4)))) (and (= 0 (select .cse0 (+ ULTIMATE.start_main_~s~0.offset 8))) (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_dll_update_at_~head.offset ULTIMATE.start_main_~s~0.offset) (= ULTIMATE.start_main_~s~0.base (select (select |v_#memory_$Pointer$.base_18| .cse1) (+ v_subst_2 8))) (= |#memory_$Pointer$.base| (store |v_#memory_$Pointer$.base_18| ULTIMATE.start_main_~s~0.base (store .cse0 ULTIMATE.start_dll_update_at_~head.offset (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_dll_update_at_~head.offset)))) (not (= ULTIMATE.start_main_~s~0.base .cse1))))) [2020-07-28 18:06:03,938 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ [v_subst_2]. (let ((.cse0 (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base))) (let ((.cse1 (select .cse0 (+ ULTIMATE.start_main_~s~0.offset 4)))) (and (= (select .cse0 (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (not (= ULTIMATE.start_main_~s~0.base .cse1)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| .cse1) (+ v_subst_2 8)))))) [2020-07-28 18:06:04,329 INFO L440 ElimStorePlain]: Different costs {0=[|v_#memory_int_13|], 2=[|v_#memory_$Pointer$.offset_13|], 12=[|v_#memory_$Pointer$.base_19|]} [2020-07-28 18:06:04,337 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 21 [2020-07-28 18:06:04,337 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:06:04,356 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:06:04,363 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 112 treesize of output 84 [2020-07-28 18:06:04,364 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-28 18:06:04,383 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:06:04,543 WARN L193 SmtUtils]: Spent 152.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 54 [2020-07-28 18:06:04,544 INFO L350 Elim1Store]: treesize reduction 12, result has 94.5 percent of original size [2020-07-28 18:06:04,545 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 101 treesize of output 259 [2020-07-28 18:06:04,565 INFO L342 QuantifierPusher]: Applying distributivity to a CONJUNCTION[9, 3, 2, 1] term [2020-07-28 18:06:04,566 INFO L523 QuantifierPusher]: Distributing 2 conjuncts over 9 disjuncts [2020-07-28 18:06:04,568 INFO L544 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2020-07-28 18:06:04,616 INFO L624 ElimStorePlain]: treesize reduction 184, result has 27.0 percent of original size [2020-07-28 18:06:04,618 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 3 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-28 18:06:04,618 INFO L244 ElimStorePlain]: Needed 4 recursive calls to eliminate 4 variables, input treesize:156, output treesize:41 [2020-07-28 18:06:04,626 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-28 18:06:04,626 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_19|, |v_#memory_int_13|, |v_#memory_$Pointer$.offset_13|, v_subst_2]. (let ((.cse3 (select |v_#memory_$Pointer$.base_19| ULTIMATE.start_main_~s~0.base)) (.cse4 (+ ULTIMATE.start_main_~s~0.offset 4))) (let ((.cse0 (select .cse3 .cse4))) (let ((.cse2 (select (select |v_#memory_$Pointer$.offset_13| ULTIMATE.start_main_~s~0.base) .cse4)) (.cse1 (select |v_#memory_$Pointer$.base_19| .cse0))) (and (not (= .cse0 ULTIMATE.start_main_~s~0.base)) (= |#memory_$Pointer$.base| (store |v_#memory_$Pointer$.base_19| .cse0 (store .cse1 .cse2 (select (select |#memory_$Pointer$.base| .cse0) .cse2)))) (= 0 (select .cse3 (+ ULTIMATE.start_main_~s~0.offset 8))) (= |#memory_int| (store |v_#memory_int_13| .cse0 (store (select |v_#memory_int_13| .cse0) .cse2 (+ ULTIMATE.start_main_~len~0 1)))) (= |#memory_$Pointer$.offset| (store |v_#memory_$Pointer$.offset_13| .cse0 (store (select |v_#memory_$Pointer$.offset_13| .cse0) .cse2 (select (select |#memory_$Pointer$.offset| .cse0) .cse2)))) (= ULTIMATE.start_main_~s~0.base (select .cse1 (+ v_subst_2 8))))))) [2020-07-28 18:06:04,627 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (let ((.cse0 (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base)) (.cse2 (+ ULTIMATE.start_main_~s~0.offset 4))) (let ((.cse1 (select .cse0 .cse2))) (and (= (select .cse0 (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| .cse1) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) .cse2)) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base .cse1))))) [2020-07-28 18:06:05,004 INFO L440 ElimStorePlain]: Different costs {0=[|#memory_$Pointer$.offset|], 2=[|#memory_$Pointer$.base|]} [2020-07-28 18:06:05,010 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 17 [2020-07-28 18:06:05,010 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:06:05,022 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:06:05,027 INFO L350 Elim1Store]: treesize reduction 11, result has 8.3 percent of original size [2020-07-28 18:06:05,027 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 42 treesize of output 18 [2020-07-28 18:06:05,029 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-28 18:06:05,034 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:06:05,044 INFO L544 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-28 18:06:05,044 INFO L244 ElimStorePlain]: Needed 3 recursive calls to eliminate 4 variables, input treesize:57, output treesize:7 [2020-07-28 18:06:05,047 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-28 18:06:05,047 WARN L407 uantifierElimination]: Input elimination task: ∃ [|#memory_$Pointer$.base|, v_ULTIMATE.start_dll_get_data_at_~head.base_6, v_ULTIMATE.start_dll_get_data_at_~head.offset_6, |#memory_$Pointer$.offset|]. (let ((.cse2 (select |#memory_$Pointer$.base| v_ULTIMATE.start_dll_get_data_at_~head.base_6)) (.cse3 (+ v_ULTIMATE.start_dll_get_data_at_~head.offset_6 4))) (let ((.cse1 (select (select |#memory_$Pointer$.offset| v_ULTIMATE.start_dll_get_data_at_~head.base_6) .cse3)) (.cse0 (select .cse2 .cse3))) (and (= ULTIMATE.start_dll_get_data_at_~head.base .cse0) (= (select (select |#memory_int| .cse0) .cse1) ULTIMATE.start_main_~expected~0) (= .cse1 ULTIMATE.start_dll_get_data_at_~head.offset) (not (= v_ULTIMATE.start_dll_get_data_at_~head.base_6 .cse0)) (= 0 (select .cse2 (+ v_ULTIMATE.start_dll_get_data_at_~head.offset_6 8)))))) [2020-07-28 18:06:05,047 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0) [2020-07-28 18:06:05,086 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 10 [2020-07-28 18:06:05,095 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-28 18:06:05,100 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-28 18:06:05,100 INFO L544 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-28 18:06:05,100 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 3 variables, input treesize:22, output treesize:7 [2020-07-28 18:06:05,104 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-28 18:06:05,104 WARN L407 uantifierElimination]: Input elimination task: ∃ [|#memory_int|, ULTIMATE.start_dll_get_data_at_~head.base, ULTIMATE.start_dll_get_data_at_~head.offset]. (let ((.cse0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset))) (and (<= ULTIMATE.start_main_~expected~0 .cse0) (<= .cse0 ULTIMATE.start_main_~expected~0) (= |ULTIMATE.start_dll_get_data_at_#res| .cse0))) [2020-07-28 18:06:05,104 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (and (<= |ULTIMATE.start_dll_get_data_at_#res| ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_dll_get_data_at_#res|)) [2020-07-28 18:06:05,185 INFO L280 TraceCheckUtils]: 0: Hoare triple {3787#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {3787#true} is VALID [2020-07-28 18:06:05,185 INFO L280 TraceCheckUtils]: 1: Hoare triple {3787#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {3787#true} is VALID [2020-07-28 18:06:05,187 INFO L280 TraceCheckUtils]: 2: Hoare triple {3787#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {3820#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:06:05,187 INFO L280 TraceCheckUtils]: 3: Hoare triple {3820#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {3820#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:06:05,188 INFO L280 TraceCheckUtils]: 4: Hoare triple {3820#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {3820#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:06:05,188 INFO L280 TraceCheckUtils]: 5: Hoare triple {3820#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {3820#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:06:05,189 INFO L280 TraceCheckUtils]: 6: Hoare triple {3820#(= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {3833#(= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base))} is VALID [2020-07-28 18:06:05,190 INFO L280 TraceCheckUtils]: 7: Hoare triple {3833#(= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base))} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {3837#(not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:06:05,190 INFO L280 TraceCheckUtils]: 8: Hoare triple {3837#(not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base))} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {3837#(not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base))} is VALID [2020-07-28 18:06:05,192 INFO L280 TraceCheckUtils]: 9: Hoare triple {3837#(not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base))} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {3844#(and (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4))) (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 8))) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} is VALID [2020-07-28 18:06:05,195 INFO L280 TraceCheckUtils]: 10: Hoare triple {3844#(and (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4))) (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 8))) (not (= ULTIMATE.start_dll_create_~head~0.base ULTIMATE.start_dll_create_~new_head~0.base)))} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {3848#(and (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 8))) (exists ((ULTIMATE.start_dll_create_~head~0.offset Int)) (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4))) (+ ULTIMATE.start_dll_create_~head~0.offset 8)))))} is VALID [2020-07-28 18:06:05,196 INFO L280 TraceCheckUtils]: 11: Hoare triple {3848#(and (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 8))) (exists ((ULTIMATE.start_dll_create_~head~0.offset Int)) (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4))) (+ ULTIMATE.start_dll_create_~head~0.offset 8)))))} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {3852#(and (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 8))) (exists ((v_subst_2 Int)) (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4))) (+ v_subst_2 8)))) (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4)))))} is VALID [2020-07-28 18:06:05,197 INFO L280 TraceCheckUtils]: 12: Hoare triple {3852#(and (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 8))) (exists ((v_subst_2 Int)) (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4))) (+ v_subst_2 8)))) (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4)))))} assume !(dll_create_~len > 0); {3852#(and (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 8))) (exists ((v_subst_2 Int)) (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4))) (+ v_subst_2 8)))) (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4)))))} is VALID [2020-07-28 18:06:05,198 INFO L280 TraceCheckUtils]: 13: Hoare triple {3852#(and (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 8))) (exists ((v_subst_2 Int)) (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4))) (+ v_subst_2 8)))) (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) (+ ULTIMATE.start_dll_create_~head~0.offset 4)))))} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {3859#(and (exists ((v_subst_2 Int)) (= |ULTIMATE.start_dll_create_#res.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) (+ |ULTIMATE.start_dll_create_#res.offset| 4))) (+ v_subst_2 8)))) (not (= |ULTIMATE.start_dll_create_#res.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) (+ |ULTIMATE.start_dll_create_#res.offset| 4)))) (= 0 (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) (+ |ULTIMATE.start_dll_create_#res.offset| 8))))} is VALID [2020-07-28 18:06:05,199 INFO L280 TraceCheckUtils]: 14: Hoare triple {3859#(and (exists ((v_subst_2 Int)) (= |ULTIMATE.start_dll_create_#res.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) (+ |ULTIMATE.start_dll_create_#res.offset| 4))) (+ v_subst_2 8)))) (not (= |ULTIMATE.start_dll_create_#res.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) (+ |ULTIMATE.start_dll_create_#res.offset| 4)))) (= 0 (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) (+ |ULTIMATE.start_dll_create_#res.offset| 8))))} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {3863#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} is VALID [2020-07-28 18:06:05,201 INFO L280 TraceCheckUtils]: 15: Hoare triple {3863#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3867#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_dll_update_at_~head.offset ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base))} is VALID [2020-07-28 18:06:05,202 INFO L280 TraceCheckUtils]: 16: Hoare triple {3867#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_dll_update_at_~head.offset ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base))} assume !(dll_update_at_~index > 0); {3867#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_dll_update_at_~head.offset ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base))} is VALID [2020-07-28 18:06:05,205 INFO L280 TraceCheckUtils]: 17: Hoare triple {3867#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (<= ULTIMATE.start_dll_update_at_~head.offset ULTIMATE.start_main_~s~0.offset) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3863#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} is VALID [2020-07-28 18:06:05,206 INFO L280 TraceCheckUtils]: 18: Hoare triple {3863#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3877#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= 1 ULTIMATE.start_main_~i~0))} is VALID [2020-07-28 18:06:05,207 INFO L280 TraceCheckUtils]: 19: Hoare triple {3877#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= 1 ULTIMATE.start_main_~i~0))} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {3881#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset))} is VALID [2020-07-28 18:06:05,208 INFO L280 TraceCheckUtils]: 20: Hoare triple {3881#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base) (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset))} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {3885#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)) ULTIMATE.start_dll_update_at_~head.base) (= (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)) ULTIMATE.start_dll_update_at_~head.offset))} is VALID [2020-07-28 18:06:05,209 INFO L280 TraceCheckUtils]: 21: Hoare triple {3885#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)) ULTIMATE.start_dll_update_at_~head.base) (= (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)) ULTIMATE.start_dll_update_at_~head.offset))} assume !(dll_update_at_~index > 0); {3885#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)) ULTIMATE.start_dll_update_at_~head.base) (= (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)) ULTIMATE.start_dll_update_at_~head.offset))} is VALID [2020-07-28 18:06:05,212 INFO L280 TraceCheckUtils]: 22: Hoare triple {3885#(and (exists ((v_subst_2 Int)) (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ v_subst_2 8)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)) ULTIMATE.start_dll_update_at_~head.base) (= (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)) ULTIMATE.start_dll_update_at_~head.offset))} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {3892#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} is VALID [2020-07-28 18:06:05,213 INFO L280 TraceCheckUtils]: 23: Hoare triple {3892#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {3892#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} is VALID [2020-07-28 18:06:05,214 INFO L280 TraceCheckUtils]: 24: Hoare triple {3892#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} assume !(main_~i~0 < main_~len~0); {3892#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} is VALID [2020-07-28 18:06:05,214 INFO L280 TraceCheckUtils]: 25: Hoare triple {3892#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} main_~i~0 := 0; {3902#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} is VALID [2020-07-28 18:06:05,215 INFO L280 TraceCheckUtils]: 26: Hoare triple {3902#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {3902#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} is VALID [2020-07-28 18:06:05,217 INFO L280 TraceCheckUtils]: 27: Hoare triple {3902#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} assume !(dll_get_data_at_~index > 0); {3902#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} is VALID [2020-07-28 18:06:05,218 INFO L280 TraceCheckUtils]: 28: Hoare triple {3902#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {3902#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} is VALID [2020-07-28 18:06:05,219 INFO L280 TraceCheckUtils]: 29: Hoare triple {3902#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {3902#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} is VALID [2020-07-28 18:06:05,220 INFO L280 TraceCheckUtils]: 30: Hoare triple {3902#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} assume !(main_~expected~0 != main_#t~ret14);havoc main_#t~ret14; {3902#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} is VALID [2020-07-28 18:06:05,221 INFO L280 TraceCheckUtils]: 31: Hoare triple {3902#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= 0 ULTIMATE.start_main_~i~0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))))} main_#t~post13 := main_~i~0;main_~i~0 := 1 + main_#t~post13;havoc main_#t~post13; {3921#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= 1 ULTIMATE.start_main_~i~0))} is VALID [2020-07-28 18:06:05,223 INFO L280 TraceCheckUtils]: 32: Hoare triple {3921#(and (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 8)) 0) (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4))) (+ ULTIMATE.start_main_~len~0 1)) (not (= ULTIMATE.start_main_~s~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) (+ ULTIMATE.start_main_~s~0.offset 4)))) (= 1 ULTIMATE.start_main_~i~0))} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {3925#(and (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4))) ULTIMATE.start_main_~expected~0) (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 8))) (not (= ULTIMATE.start_dll_get_data_at_~head.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4)))))} is VALID [2020-07-28 18:06:05,225 INFO L280 TraceCheckUtils]: 33: Hoare triple {3925#(and (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4))) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4))) ULTIMATE.start_main_~expected~0) (= 0 (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 8))) (not (= ULTIMATE.start_dll_get_data_at_~head.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_get_data_at_~head.base) (+ ULTIMATE.start_dll_get_data_at_~head.offset 4)))))} assume !!(dll_get_data_at_~index > 0);call dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset := read~$Pointer$(dll_get_data_at_~head.base, 4 + dll_get_data_at_~head.offset, 4);dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;dll_get_data_at_#t~post7 := dll_get_data_at_~index;dll_get_data_at_~index := dll_get_data_at_#t~post7 - 1;havoc dll_get_data_at_#t~post7; {3808#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} is VALID [2020-07-28 18:06:05,226 INFO L280 TraceCheckUtils]: 34: Hoare triple {3808#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} assume !(dll_get_data_at_~index > 0); {3808#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} is VALID [2020-07-28 18:06:05,226 INFO L280 TraceCheckUtils]: 35: Hoare triple {3808#(and (<= ULTIMATE.start_main_~expected~0 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (<= (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset) ULTIMATE.start_main_~expected~0))} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {3809#(and (<= |ULTIMATE.start_dll_get_data_at_#res| ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_dll_get_data_at_#res|))} is VALID [2020-07-28 18:06:05,227 INFO L280 TraceCheckUtils]: 36: Hoare triple {3809#(and (<= |ULTIMATE.start_dll_get_data_at_#res| ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_dll_get_data_at_#res|))} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {3810#(and (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_main_#t~ret14|) (< |ULTIMATE.start_main_#t~ret14| (+ ULTIMATE.start_main_~expected~0 1)))} is VALID [2020-07-28 18:06:05,228 INFO L280 TraceCheckUtils]: 37: Hoare triple {3810#(and (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_main_#t~ret14|) (< |ULTIMATE.start_main_#t~ret14| (+ ULTIMATE.start_main_~expected~0 1)))} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {3788#false} is VALID [2020-07-28 18:06:05,228 INFO L280 TraceCheckUtils]: 38: Hoare triple {3788#false} assume !false; {3788#false} is VALID [2020-07-28 18:06:05,237 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 2 proven. 20 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:06:05,237 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 18:06:05,237 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 21] total 40 [2020-07-28 18:06:05,237 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1345337340] [2020-07-28 18:06:05,238 INFO L78 Accepts]: Start accepts. Automaton has 40 states. Word has length 39 [2020-07-28 18:06:05,238 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:06:05,238 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 40 states. [2020-07-28 18:06:05,372 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:06:05,372 INFO L459 AbstractCegarLoop]: Interpolant automaton has 40 states [2020-07-28 18:06:05,372 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:06:05,373 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2020-07-28 18:06:05,374 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=102, Invalid=1458, Unknown=0, NotChecked=0, Total=1560 [2020-07-28 18:06:05,374 INFO L87 Difference]: Start difference. First operand 40 states and 42 transitions. Second operand 40 states. [2020-07-28 18:06:08,327 WARN L193 SmtUtils]: Spent 154.00 ms on a formula simplification. DAG size of input: 87 DAG size of output: 79 [2020-07-28 18:06:09,289 WARN L193 SmtUtils]: Spent 195.00 ms on a formula simplification. DAG size of input: 109 DAG size of output: 88 [2020-07-28 18:06:10,510 WARN L193 SmtUtils]: Spent 121.00 ms on a formula simplification. DAG size of input: 80 DAG size of output: 64 [2020-07-28 18:06:11,226 WARN L193 SmtUtils]: Spent 115.00 ms on a formula simplification. DAG size of input: 80 DAG size of output: 62 [2020-07-28 18:06:11,731 WARN L193 SmtUtils]: Spent 119.00 ms on a formula simplification. DAG size of input: 77 DAG size of output: 65 [2020-07-28 18:06:16,254 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:06:16,254 INFO L93 Difference]: Finished difference Result 88 states and 94 transitions. [2020-07-28 18:06:16,254 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2020-07-28 18:06:16,254 INFO L78 Accepts]: Start accepts. Automaton has 40 states. Word has length 39 [2020-07-28 18:06:16,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:06:16,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 40 states. [2020-07-28 18:06:16,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 94 transitions. [2020-07-28 18:06:16,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 40 states. [2020-07-28 18:06:16,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 94 transitions. [2020-07-28 18:06:16,257 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 45 states and 94 transitions. [2020-07-28 18:06:16,508 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 94 edges. 94 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:06:16,510 INFO L225 Difference]: With dead ends: 88 [2020-07-28 18:06:16,510 INFO L226 Difference]: Without dead ends: 80 [2020-07-28 18:06:16,512 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 23 SyntacticMatches, 2 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1409 ImplicationChecksByTransitivity, 6.5s TimeCoverageRelationStatistics Valid=804, Invalid=5676, Unknown=0, NotChecked=0, Total=6480 [2020-07-28 18:06:16,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2020-07-28 18:06:16,695 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 41. [2020-07-28 18:06:16,696 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:06:16,696 INFO L82 GeneralOperation]: Start isEquivalent. First operand 80 states. Second operand 41 states. [2020-07-28 18:06:16,696 INFO L74 IsIncluded]: Start isIncluded. First operand 80 states. Second operand 41 states. [2020-07-28 18:06:16,696 INFO L87 Difference]: Start difference. First operand 80 states. Second operand 41 states. [2020-07-28 18:06:16,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:06:16,699 INFO L93 Difference]: Finished difference Result 80 states and 85 transitions. [2020-07-28 18:06:16,699 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 85 transitions. [2020-07-28 18:06:16,699 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:06:16,699 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:06:16,699 INFO L74 IsIncluded]: Start isIncluded. First operand 41 states. Second operand 80 states. [2020-07-28 18:06:16,700 INFO L87 Difference]: Start difference. First operand 41 states. Second operand 80 states. [2020-07-28 18:06:16,702 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:06:16,702 INFO L93 Difference]: Finished difference Result 80 states and 85 transitions. [2020-07-28 18:06:16,702 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 85 transitions. [2020-07-28 18:06:16,702 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:06:16,702 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:06:16,703 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:06:16,703 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:06:16,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 41 states. [2020-07-28 18:06:16,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 43 transitions. [2020-07-28 18:06:16,704 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 43 transitions. Word has length 39 [2020-07-28 18:06:16,704 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:06:16,704 INFO L479 AbstractCegarLoop]: Abstraction has 41 states and 43 transitions. [2020-07-28 18:06:16,704 INFO L480 AbstractCegarLoop]: Interpolant automaton has 40 states. [2020-07-28 18:06:16,705 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 43 transitions. [2020-07-28 18:06:16,705 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2020-07-28 18:06:16,705 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:06:16,705 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:06:16,918 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2020-07-28 18:06:16,919 INFO L427 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:06:16,919 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:06:16,919 INFO L82 PathProgramCache]: Analyzing trace with hash 535664154, now seen corresponding path program 2 times [2020-07-28 18:06:16,920 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:06:16,920 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1906486464] [2020-07-28 18:06:16,920 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:06:16,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:06:17,015 INFO L280 TraceCheckUtils]: 0: Hoare triple {4372#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {4372#true} is VALID [2020-07-28 18:06:17,015 INFO L280 TraceCheckUtils]: 1: Hoare triple {4372#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {4372#true} is VALID [2020-07-28 18:06:17,015 INFO L280 TraceCheckUtils]: 2: Hoare triple {4372#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {4372#true} is VALID [2020-07-28 18:06:17,015 INFO L280 TraceCheckUtils]: 3: Hoare triple {4372#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {4372#true} is VALID [2020-07-28 18:06:17,015 INFO L280 TraceCheckUtils]: 4: Hoare triple {4372#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {4372#true} is VALID [2020-07-28 18:06:17,016 INFO L280 TraceCheckUtils]: 5: Hoare triple {4372#true} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {4372#true} is VALID [2020-07-28 18:06:17,016 INFO L280 TraceCheckUtils]: 6: Hoare triple {4372#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {4372#true} is VALID [2020-07-28 18:06:17,016 INFO L280 TraceCheckUtils]: 7: Hoare triple {4372#true} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {4372#true} is VALID [2020-07-28 18:06:17,016 INFO L280 TraceCheckUtils]: 8: Hoare triple {4372#true} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {4372#true} is VALID [2020-07-28 18:06:17,016 INFO L280 TraceCheckUtils]: 9: Hoare triple {4372#true} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {4372#true} is VALID [2020-07-28 18:06:17,016 INFO L280 TraceCheckUtils]: 10: Hoare triple {4372#true} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {4372#true} is VALID [2020-07-28 18:06:17,016 INFO L280 TraceCheckUtils]: 11: Hoare triple {4372#true} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {4372#true} is VALID [2020-07-28 18:06:17,017 INFO L280 TraceCheckUtils]: 12: Hoare triple {4372#true} assume !(dll_create_~len > 0); {4372#true} is VALID [2020-07-28 18:06:17,017 INFO L280 TraceCheckUtils]: 13: Hoare triple {4372#true} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {4372#true} is VALID [2020-07-28 18:06:17,017 INFO L280 TraceCheckUtils]: 14: Hoare triple {4372#true} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {4372#true} is VALID [2020-07-28 18:06:17,017 INFO L280 TraceCheckUtils]: 15: Hoare triple {4372#true} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {4372#true} is VALID [2020-07-28 18:06:17,017 INFO L280 TraceCheckUtils]: 16: Hoare triple {4372#true} assume !(dll_update_at_~index > 0); {4372#true} is VALID [2020-07-28 18:06:17,017 INFO L280 TraceCheckUtils]: 17: Hoare triple {4372#true} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {4372#true} is VALID [2020-07-28 18:06:17,017 INFO L280 TraceCheckUtils]: 18: Hoare triple {4372#true} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {4372#true} is VALID [2020-07-28 18:06:17,018 INFO L280 TraceCheckUtils]: 19: Hoare triple {4372#true} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {4372#true} is VALID [2020-07-28 18:06:17,018 INFO L280 TraceCheckUtils]: 20: Hoare triple {4372#true} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {4372#true} is VALID [2020-07-28 18:06:17,018 INFO L280 TraceCheckUtils]: 21: Hoare triple {4372#true} assume !(dll_update_at_~index > 0); {4372#true} is VALID [2020-07-28 18:06:17,018 INFO L280 TraceCheckUtils]: 22: Hoare triple {4372#true} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {4372#true} is VALID [2020-07-28 18:06:17,018 INFO L280 TraceCheckUtils]: 23: Hoare triple {4372#true} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {4372#true} is VALID [2020-07-28 18:06:17,018 INFO L280 TraceCheckUtils]: 24: Hoare triple {4372#true} assume !(main_~i~0 < main_~len~0); {4372#true} is VALID [2020-07-28 18:06:17,019 INFO L280 TraceCheckUtils]: 25: Hoare triple {4372#true} main_~i~0 := 0; {4374#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:06:17,019 INFO L280 TraceCheckUtils]: 26: Hoare triple {4374#(= 0 ULTIMATE.start_main_~i~0)} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {4374#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:06:17,020 INFO L280 TraceCheckUtils]: 27: Hoare triple {4374#(= 0 ULTIMATE.start_main_~i~0)} assume !(dll_get_data_at_~index > 0); {4374#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:06:17,020 INFO L280 TraceCheckUtils]: 28: Hoare triple {4374#(= 0 ULTIMATE.start_main_~i~0)} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {4374#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:06:17,021 INFO L280 TraceCheckUtils]: 29: Hoare triple {4374#(= 0 ULTIMATE.start_main_~i~0)} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {4374#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:06:17,021 INFO L280 TraceCheckUtils]: 30: Hoare triple {4374#(= 0 ULTIMATE.start_main_~i~0)} assume !(main_~expected~0 != main_#t~ret14);havoc main_#t~ret14; {4374#(= 0 ULTIMATE.start_main_~i~0)} is VALID [2020-07-28 18:06:17,021 INFO L280 TraceCheckUtils]: 31: Hoare triple {4374#(= 0 ULTIMATE.start_main_~i~0)} main_#t~post13 := main_~i~0;main_~i~0 := 1 + main_#t~post13;havoc main_#t~post13; {4375#(<= ULTIMATE.start_main_~i~0 1)} is VALID [2020-07-28 18:06:17,022 INFO L280 TraceCheckUtils]: 32: Hoare triple {4375#(<= ULTIMATE.start_main_~i~0 1)} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {4376#(<= ULTIMATE.start_dll_get_data_at_~index 1)} is VALID [2020-07-28 18:06:17,024 INFO L280 TraceCheckUtils]: 33: Hoare triple {4376#(<= ULTIMATE.start_dll_get_data_at_~index 1)} assume !!(dll_get_data_at_~index > 0);call dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset := read~$Pointer$(dll_get_data_at_~head.base, 4 + dll_get_data_at_~head.offset, 4);dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;dll_get_data_at_#t~post7 := dll_get_data_at_~index;dll_get_data_at_~index := dll_get_data_at_#t~post7 - 1;havoc dll_get_data_at_#t~post7; {4377#(<= ULTIMATE.start_dll_get_data_at_~index 0)} is VALID [2020-07-28 18:06:17,025 INFO L280 TraceCheckUtils]: 34: Hoare triple {4377#(<= ULTIMATE.start_dll_get_data_at_~index 0)} assume !!(dll_get_data_at_~index > 0);call dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset := read~$Pointer$(dll_get_data_at_~head.base, 4 + dll_get_data_at_~head.offset, 4);dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;dll_get_data_at_#t~post7 := dll_get_data_at_~index;dll_get_data_at_~index := dll_get_data_at_#t~post7 - 1;havoc dll_get_data_at_#t~post7; {4373#false} is VALID [2020-07-28 18:06:17,025 INFO L280 TraceCheckUtils]: 35: Hoare triple {4373#false} assume !(dll_get_data_at_~index > 0); {4373#false} is VALID [2020-07-28 18:06:17,025 INFO L280 TraceCheckUtils]: 36: Hoare triple {4373#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {4373#false} is VALID [2020-07-28 18:06:17,026 INFO L280 TraceCheckUtils]: 37: Hoare triple {4373#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {4373#false} is VALID [2020-07-28 18:06:17,026 INFO L280 TraceCheckUtils]: 38: Hoare triple {4373#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {4373#false} is VALID [2020-07-28 18:06:17,026 INFO L280 TraceCheckUtils]: 39: Hoare triple {4373#false} assume !false; {4373#false} is VALID [2020-07-28 18:06:17,028 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 7 proven. 3 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2020-07-28 18:06:17,028 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1906486464] [2020-07-28 18:06:17,029 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [48407785] [2020-07-28 18:06:17,029 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 10 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:06:17,093 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2020-07-28 18:06:17,093 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2020-07-28 18:06:17,094 INFO L263 TraceCheckSpWp]: Trace formula consists of 219 conjuncts, 6 conjunts are in the unsatisfiable core [2020-07-28 18:06:17,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:06:17,109 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 18:06:17,259 INFO L280 TraceCheckUtils]: 0: Hoare triple {4372#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {4372#true} is VALID [2020-07-28 18:06:17,260 INFO L280 TraceCheckUtils]: 1: Hoare triple {4372#true} havoc main_#res;havoc main_#t~ret11.base, main_#t~ret11.offset, main_#t~post12, main_~new_data~0, main_#t~ret14, main_#t~post13, main_~expected~0, main_~len~0, main_~data~0, main_~s~0.base, main_~s~0.offset, main_~i~0;main_~len~0 := 2;main_~data~0 := 1;dll_create_#in~len, dll_create_#in~data := main_~len~0, main_~data~0;havoc dll_create_#res.base, dll_create_#res.offset;havoc dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset, dll_create_#t~post4, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~len, dll_create_~data, dll_create_~head~0.base, dll_create_~head~0.offset;dll_create_~len := dll_create_#in~len;dll_create_~data := dll_create_#in~data;dll_create_~head~0.base, dll_create_~head~0.offset := 0, 0; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,261 INFO L280 TraceCheckUtils]: 2: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,261 INFO L280 TraceCheckUtils]: 3: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,261 INFO L280 TraceCheckUtils]: 4: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,262 INFO L280 TraceCheckUtils]: 5: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !(dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,263 INFO L280 TraceCheckUtils]: 6: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,263 INFO L280 TraceCheckUtils]: 7: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !!(dll_create_~len > 0);call dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset := #Ultimate.allocOnHeap(12);dll_create_~new_head~0.base, dll_create_~new_head~0.offset := dll_create_#t~malloc3.base, dll_create_#t~malloc3.offset; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,264 INFO L280 TraceCheckUtils]: 8: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !(0 == dll_create_~new_head~0.base && 0 == dll_create_~new_head~0.offset); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,264 INFO L280 TraceCheckUtils]: 9: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} call write~int(dll_create_~data, dll_create_~new_head~0.base, dll_create_~new_head~0.offset, 4);call write~$Pointer$(dll_create_~head~0.base, dll_create_~head~0.offset, dll_create_~new_head~0.base, 4 + dll_create_~new_head~0.offset, 4);call write~$Pointer$(0, 0, dll_create_~new_head~0.base, 8 + dll_create_~new_head~0.offset, 4); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,265 INFO L280 TraceCheckUtils]: 10: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume dll_create_~head~0.base != 0 || dll_create_~head~0.offset != 0;call write~$Pointer$(dll_create_~new_head~0.base, dll_create_~new_head~0.offset, dll_create_~head~0.base, 8 + dll_create_~head~0.offset, 4); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,265 INFO L280 TraceCheckUtils]: 11: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} dll_create_~head~0.base, dll_create_~head~0.offset := dll_create_~new_head~0.base, dll_create_~new_head~0.offset;dll_create_#t~post4 := dll_create_~len;dll_create_~len := dll_create_#t~post4 - 1;havoc dll_create_#t~post4; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,267 INFO L280 TraceCheckUtils]: 12: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !(dll_create_~len > 0); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,268 INFO L280 TraceCheckUtils]: 13: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} dll_create_#res.base, dll_create_#res.offset := dll_create_~head~0.base, dll_create_~head~0.offset; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,269 INFO L280 TraceCheckUtils]: 14: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} main_#t~ret11.base, main_#t~ret11.offset := dll_create_#res.base, dll_create_#res.offset;main_~s~0.base, main_~s~0.offset := main_#t~ret11.base, main_#t~ret11.offset;havoc main_#t~ret11.base, main_#t~ret11.offset;havoc main_~i~0;main_~i~0 := 0; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,272 INFO L280 TraceCheckUtils]: 15: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,273 INFO L280 TraceCheckUtils]: 16: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !(dll_update_at_~index > 0); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,273 INFO L280 TraceCheckUtils]: 17: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,273 INFO L280 TraceCheckUtils]: 18: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,274 INFO L280 TraceCheckUtils]: 19: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !!(main_~i~0 < main_~len~0);main_~new_data~0 := main_~i~0 + main_~len~0;dll_update_at_#in~head.base, dll_update_at_#in~head.offset, dll_update_at_#in~data, dll_update_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~new_data~0, main_~i~0;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset, dll_update_at_#t~post10, dll_update_at_~head.base, dll_update_at_~head.offset, dll_update_at_~data, dll_update_at_~index;dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#in~head.base, dll_update_at_#in~head.offset;dll_update_at_~data := dll_update_at_#in~data;dll_update_at_~index := dll_update_at_#in~index; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,274 INFO L280 TraceCheckUtils]: 20: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !!(dll_update_at_~index > 0);call dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset := read~$Pointer$(dll_update_at_~head.base, 4 + dll_update_at_~head.offset, 4);dll_update_at_~head.base, dll_update_at_~head.offset := dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;havoc dll_update_at_#t~mem9.base, dll_update_at_#t~mem9.offset;dll_update_at_#t~post10 := dll_update_at_~index;dll_update_at_~index := dll_update_at_#t~post10 - 1;havoc dll_update_at_#t~post10; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,275 INFO L280 TraceCheckUtils]: 21: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !(dll_update_at_~index > 0); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,276 INFO L280 TraceCheckUtils]: 22: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} call write~int(dll_update_at_~data, dll_update_at_~head.base, dll_update_at_~head.offset, 4); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,276 INFO L280 TraceCheckUtils]: 23: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} main_#t~post12 := main_~i~0;main_~i~0 := 1 + main_#t~post12;havoc main_#t~post12; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,277 INFO L280 TraceCheckUtils]: 24: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !(main_~i~0 < main_~len~0); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,277 INFO L280 TraceCheckUtils]: 25: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} main_~i~0 := 0; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,278 INFO L280 TraceCheckUtils]: 26: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,278 INFO L280 TraceCheckUtils]: 27: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !(dll_get_data_at_~index > 0); {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,278 INFO L280 TraceCheckUtils]: 28: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,279 INFO L280 TraceCheckUtils]: 29: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,279 INFO L280 TraceCheckUtils]: 30: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !(main_~expected~0 != main_#t~ret14);havoc main_#t~ret14; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,280 INFO L280 TraceCheckUtils]: 31: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} main_#t~post13 := main_~i~0;main_~i~0 := 1 + main_#t~post13;havoc main_#t~post13; {4384#(<= ULTIMATE.start_main_~len~0 2)} is VALID [2020-07-28 18:06:17,280 INFO L280 TraceCheckUtils]: 32: Hoare triple {4384#(<= ULTIMATE.start_main_~len~0 2)} assume !!(main_~i~0 < main_~len~0);main_~expected~0 := main_~i~0 + main_~len~0;dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset, dll_get_data_at_#in~index := main_~s~0.base, main_~s~0.offset, main_~i~0;havoc dll_get_data_at_#res;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset, dll_get_data_at_#t~post7, dll_get_data_at_#t~mem8, dll_get_data_at_~head.base, dll_get_data_at_~head.offset, dll_get_data_at_~index;dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#in~head.base, dll_get_data_at_#in~head.offset;dll_get_data_at_~index := dll_get_data_at_#in~index; {4376#(<= ULTIMATE.start_dll_get_data_at_~index 1)} is VALID [2020-07-28 18:06:17,283 INFO L280 TraceCheckUtils]: 33: Hoare triple {4376#(<= ULTIMATE.start_dll_get_data_at_~index 1)} assume !!(dll_get_data_at_~index > 0);call dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset := read~$Pointer$(dll_get_data_at_~head.base, 4 + dll_get_data_at_~head.offset, 4);dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;dll_get_data_at_#t~post7 := dll_get_data_at_~index;dll_get_data_at_~index := dll_get_data_at_#t~post7 - 1;havoc dll_get_data_at_#t~post7; {4377#(<= ULTIMATE.start_dll_get_data_at_~index 0)} is VALID [2020-07-28 18:06:17,285 INFO L280 TraceCheckUtils]: 34: Hoare triple {4377#(<= ULTIMATE.start_dll_get_data_at_~index 0)} assume !!(dll_get_data_at_~index > 0);call dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset := read~$Pointer$(dll_get_data_at_~head.base, 4 + dll_get_data_at_~head.offset, 4);dll_get_data_at_~head.base, dll_get_data_at_~head.offset := dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;havoc dll_get_data_at_#t~mem6.base, dll_get_data_at_#t~mem6.offset;dll_get_data_at_#t~post7 := dll_get_data_at_~index;dll_get_data_at_~index := dll_get_data_at_#t~post7 - 1;havoc dll_get_data_at_#t~post7; {4373#false} is VALID [2020-07-28 18:06:17,285 INFO L280 TraceCheckUtils]: 35: Hoare triple {4373#false} assume !(dll_get_data_at_~index > 0); {4373#false} is VALID [2020-07-28 18:06:17,285 INFO L280 TraceCheckUtils]: 36: Hoare triple {4373#false} call dll_get_data_at_#t~mem8 := read~int(dll_get_data_at_~head.base, dll_get_data_at_~head.offset, 4);dll_get_data_at_#res := dll_get_data_at_#t~mem8;havoc dll_get_data_at_#t~mem8; {4373#false} is VALID [2020-07-28 18:06:17,285 INFO L280 TraceCheckUtils]: 37: Hoare triple {4373#false} main_#t~ret14 := dll_get_data_at_#res;assume -2147483648 <= main_#t~ret14 && main_#t~ret14 <= 2147483647; {4373#false} is VALID [2020-07-28 18:06:17,285 INFO L280 TraceCheckUtils]: 38: Hoare triple {4373#false} assume main_~expected~0 != main_#t~ret14;havoc main_#t~ret14; {4373#false} is VALID [2020-07-28 18:06:17,285 INFO L280 TraceCheckUtils]: 39: Hoare triple {4373#false} assume !false; {4373#false} is VALID [2020-07-28 18:06:17,287 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 7 proven. 2 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2020-07-28 18:06:17,287 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 18:06:17,287 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 7 [2020-07-28 18:06:17,287 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [204365546] [2020-07-28 18:06:17,287 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 40 [2020-07-28 18:06:17,288 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:06:17,288 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 18:06:17,359 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:06:17,359 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 18:06:17,359 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:06:17,359 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 18:06:17,360 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2020-07-28 18:06:17,360 INFO L87 Difference]: Start difference. First operand 41 states and 43 transitions. Second operand 7 states. [2020-07-28 18:06:17,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:06:17,717 INFO L93 Difference]: Finished difference Result 41 states and 43 transitions. [2020-07-28 18:06:17,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 18:06:17,718 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 40 [2020-07-28 18:06:17,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:06:17,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 18:06:17,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 37 transitions. [2020-07-28 18:06:17,719 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 18:06:17,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 37 transitions. [2020-07-28 18:06:17,720 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 37 transitions. [2020-07-28 18:06:17,767 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:06:17,767 INFO L225 Difference]: With dead ends: 41 [2020-07-28 18:06:17,767 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 18:06:17,768 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=84, Unknown=0, NotChecked=0, Total=132 [2020-07-28 18:06:17,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 18:06:17,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 18:06:17,769 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:06:17,769 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 18:06:17,769 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 18:06:17,769 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 18:06:17,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:06:17,770 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 18:06:17,770 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 18:06:17,770 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:06:17,770 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:06:17,770 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 18:06:17,771 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 18:06:17,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:06:17,771 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 18:06:17,771 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 18:06:17,771 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:06:17,771 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:06:17,771 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:06:17,772 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:06:17,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 18:06:17,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 18:06:17,773 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 40 [2020-07-28 18:06:17,773 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:06:17,773 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 18:06:17,773 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 18:06:17,774 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 18:06:17,774 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:06:17,980 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,10 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 18:06:17,984 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 18:06:18,529 WARN L193 SmtUtils]: Spent 109.00 ms on a formula simplification. DAG size of input: 79 DAG size of output: 37 [2020-07-28 18:06:18,687 WARN L193 SmtUtils]: Spent 150.00 ms on a formula simplification. DAG size of input: 66 DAG size of output: 36 [2020-07-28 18:06:19,496 WARN L193 SmtUtils]: Spent 797.00 ms on a formula simplification. DAG size of input: 156 DAG size of output: 85 [2020-07-28 18:06:20,444 WARN L193 SmtUtils]: Spent 926.00 ms on a formula simplification. DAG size of input: 169 DAG size of output: 88 [2020-07-28 18:06:20,967 WARN L193 SmtUtils]: Spent 510.00 ms on a formula simplification. DAG size of input: 102 DAG size of output: 63 [2020-07-28 18:06:21,442 WARN L193 SmtUtils]: Spent 462.00 ms on a formula simplification. DAG size of input: 114 DAG size of output: 74 [2020-07-28 18:06:21,762 WARN L193 SmtUtils]: Spent 309.00 ms on a formula simplification. DAG size of input: 101 DAG size of output: 57 [2020-07-28 18:06:21,772 INFO L268 CegarLoopResult]: For program point L622-2(lines 622 627) no Hoare annotation was computed. [2020-07-28 18:06:21,773 INFO L264 CegarLoopResult]: At program point L622-3(lines 622 627) the Hoare annotation is: (let ((.cse2 (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (let ((.cse7 (+ ULTIMATE.start_main_~len~0 1)) (.cse6 (select (select |#memory_int| .cse2) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)))) (let ((.cse1 (= 0 ULTIMATE.start_main_~s~0.offset)) (.cse3 (<= .cse7 .cse6)) (.cse4 (<= ULTIMATE.start_main_~len~0 2)) (.cse5 (<= 0 ULTIMATE.start_main_~i~0)) (.cse8 (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))) (.cse9 (<= 2 ULTIMATE.start_main_~len~0)) (.cse10 (= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base))) (.cse11 (<= ULTIMATE.start_dll_update_at_~index 0))) (or (let ((.cse0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset))) (and (<= .cse0 ULTIMATE.start_main_~len~0) .cse1 (<= ULTIMATE.start_main_~len~0 .cse0) (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)) (not (= ULTIMATE.start_main_~s~0.base .cse2)) (= 0 ULTIMATE.start_main_~i~0) .cse3 .cse4 .cse5 (<= .cse6 .cse7) .cse8 .cse9 .cse10 .cse11)) (and (<= 2 ULTIMATE.start_main_~i~0) .cse5 .cse4 .cse8 .cse9 .cse10 .cse11) (and .cse1 .cse3 .cse4 .cse5 .cse8 .cse9 (<= .cse6 (+ ULTIMATE.start_main_~len~0 ULTIMATE.start_main_~i~0)) .cse10 (<= ULTIMATE.start_dll_get_data_at_~index 0) .cse11))))) [2020-07-28 18:06:21,773 INFO L268 CegarLoopResult]: For program point L622-4(lines 622 627) no Hoare annotation was computed. [2020-07-28 18:06:21,773 INFO L268 CegarLoopResult]: For program point L606(lines 1 632) no Hoare annotation was computed. [2020-07-28 18:06:21,774 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 18:06:21,774 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 18:06:21,774 INFO L271 CegarLoopResult]: At program point L631(lines 613 632) the Hoare annotation is: true [2020-07-28 18:06:21,774 INFO L264 CegarLoopResult]: At program point L590(lines 574 591) the Hoare annotation is: (and (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) 4))) (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) (<= ULTIMATE.start_main_~len~0 2) (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) (= 0 |ULTIMATE.start_dll_create_#res.offset|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) 4) |ULTIMATE.start_dll_create_#res.base|)) (<= 2 ULTIMATE.start_main_~len~0) (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base)) (= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base)) (= 0 ULTIMATE.start_dll_create_~head~0.offset)) [2020-07-28 18:06:21,774 INFO L264 CegarLoopResult]: At program point L607-2(lines 607 610) the Hoare annotation is: (let ((.cse11 (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base)) (.cse21 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset))) (let ((.cse1 (<= 1 ULTIMATE.start_main_~i~0)) (.cse2 (<= .cse21 ULTIMATE.start_main_~len~0)) (.cse3 (<= ULTIMATE.start_dll_update_at_~data (+ ULTIMATE.start_main_~len~0 1))) (.cse4 (= 0 ULTIMATE.start_main_~s~0.offset)) (.cse0 (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base)) (.cse7 (<= ULTIMATE.start_main_~len~0 .cse21)) (.cse5 (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) 4)))) (.cse6 (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4))))) (.cse8 (= 0 ULTIMATE.start_dll_create_~new_head~0.offset)) (.cse9 (= 0 |ULTIMATE.start_dll_create_#res.offset|)) (.cse10 (= 0 ULTIMATE.start_dll_create_~head~0.offset)) (.cse19 (select .cse11 4)) (.cse14 (<= (+ ULTIMATE.start_main_~i~0 2) ULTIMATE.start_dll_update_at_~data)) (.cse13 (<= ULTIMATE.start_main_~len~0 2)) (.cse20 (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)) (.cse15 (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) 4) |ULTIMATE.start_dll_create_#res.base|))) (.cse16 (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))) (.cse17 (= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base))) (.cse18 (= 0 ULTIMATE.start_dll_update_at_~head.offset))) (or (let ((.cse12 (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base))) (and (= .cse0 (select |#memory_$Pointer$.offset| ULTIMATE.start_dll_update_at_~head.base)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= .cse11 .cse12) (<= ULTIMATE.start_dll_update_at_~index 1) .cse13 .cse14 (not (= (select .cse12 (+ ULTIMATE.start_dll_update_at_~head.offset 4)) ULTIMATE.start_main_~s~0.base)) (<= 1 ULTIMATE.start_dll_update_at_~index) .cse15 .cse16 .cse17 .cse18)) (and (= .cse19 ULTIMATE.start_dll_update_at_~head.base) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= (select .cse0 4) ULTIMATE.start_dll_update_at_~head.offset) .cse7 .cse8 .cse9 (not .cse20) .cse10 .cse13 .cse14 .cse15 .cse16 .cse17 (<= ULTIMATE.start_dll_update_at_~index 0)) (and .cse5 .cse6 (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset) .cse8 .cse9 .cse10 (= 0 ULTIMATE.start_dll_update_at_~index) (<= ULTIMATE.start_dll_update_at_~data ULTIMATE.start_main_~len~0) (not (= ULTIMATE.start_main_~s~0.base .cse19)) (= 0 ULTIMATE.start_main_~i~0) .cse14 .cse13 .cse20 .cse15 .cse16 .cse17 .cse18)))) [2020-07-28 18:06:21,775 INFO L268 CegarLoopResult]: For program point L607-3(lines 607 610) no Hoare annotation was computed. [2020-07-28 18:06:21,775 INFO L268 CegarLoopResult]: For program point L624(lines 624 626) no Hoare annotation was computed. [2020-07-28 18:06:21,775 INFO L264 CegarLoopResult]: At program point L600-2(lines 600 603) the Hoare annotation is: (let ((.cse12 (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (let ((.cse14 (+ ULTIMATE.start_main_~len~0 1)) (.cse13 (select (select |#memory_int| .cse12) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4))) (.cse17 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset))) (let ((.cse3 (<= ULTIMATE.start_main_~expected~0 .cse17)) (.cse4 (<= .cse17 ULTIMATE.start_main_~expected~0)) (.cse0 (= 0 ULTIMATE.start_main_~s~0.offset)) (.cse1 (<= .cse14 .cse13)) (.cse2 (<= ULTIMATE.start_main_~len~0 2)) (.cse5 (<= 2 ULTIMATE.start_main_~len~0)) (.cse6 (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))) (.cse7 (<= .cse13 (+ ULTIMATE.start_main_~len~0 ULTIMATE.start_main_~i~0))) (.cse8 (= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base))) (.cse9 (<= ULTIMATE.start_dll_update_at_~index 0)) (.cse10 (<= ULTIMATE.start_main_~i~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (<= ULTIMATE.start_dll_get_data_at_~index 0) .cse9 .cse10) (let ((.cse11 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset))) (and (<= .cse11 ULTIMATE.start_main_~len~0) .cse0 .cse3 (<= ULTIMATE.start_main_~len~0 .cse11) .cse4 (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)) (not (= ULTIMATE.start_main_~s~0.base .cse12)) .cse1 (= 0 ULTIMATE.start_main_~i~0) .cse2 (<= .cse13 .cse14) .cse5 .cse6 (= 0 ULTIMATE.start_dll_get_data_at_~index) .cse8 .cse9)) (let ((.cse15 (let ((.cse16 (+ ULTIMATE.start_dll_get_data_at_~head.offset 4))) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_get_data_at_~head.base) .cse16)) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_dll_get_data_at_~head.base) .cse16))))) (and .cse0 (<= .cse15 ULTIMATE.start_main_~expected~0) (<= ULTIMATE.start_main_~expected~0 .cse15) (<= 1 ULTIMATE.start_dll_get_data_at_~index) (<= ULTIMATE.start_dll_get_data_at_~index 1) (= 0 ULTIMATE.start_dll_get_data_at_~head.offset) .cse1 .cse2 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10)))))) [2020-07-28 18:06:21,776 INFO L268 CegarLoopResult]: For program point L600-3(lines 600 603) no Hoare annotation was computed. [2020-07-28 18:06:21,776 INFO L264 CegarLoopResult]: At program point L625(lines 613 632) the Hoare annotation is: false [2020-07-28 18:06:21,776 INFO L268 CegarLoopResult]: For program point L592(lines 592 598) no Hoare annotation was computed. [2020-07-28 18:06:21,777 INFO L268 CegarLoopResult]: For program point L584(lines 584 586) no Hoare annotation was computed. [2020-07-28 18:06:21,777 INFO L268 CegarLoopResult]: For program point L584-2(lines 584 586) no Hoare annotation was computed. [2020-07-28 18:06:21,777 INFO L264 CegarLoopResult]: At program point L576-2(lines 576 589) the Hoare annotation is: (let ((.cse2 (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))) (.cse3 (= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base))) (.cse0 (<= ULTIMATE.start_main_~len~0 2)) (.cse1 (<= 2 ULTIMATE.start_main_~len~0)) (.cse4 (= 0 ULTIMATE.start_dll_create_~head~0.offset))) (or (and .cse0 (<= 1 ULTIMATE.start_dll_create_~len) .cse1 .cse2 .cse3) (and (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) 4))) (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4)))) .cse0 (= 0 ULTIMATE.start_dll_create_~new_head~0.offset) .cse1 .cse2 .cse3 .cse4) (and (= ULTIMATE.start_dll_create_~head~0.base 0) .cse0 .cse1 (= 2 ULTIMATE.start_dll_create_~len) .cse4))) [2020-07-28 18:06:21,777 INFO L268 CegarLoopResult]: For program point L576-3(lines 576 589) no Hoare annotation was computed. [2020-07-28 18:06:21,777 INFO L271 CegarLoopResult]: At program point L593-2(lines 593 597) the Hoare annotation is: true [2020-07-28 18:06:21,778 INFO L264 CegarLoopResult]: At program point L618-2(lines 618 621) the Hoare annotation is: (let ((.cse17 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset)) (.cse9 (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (let ((.cse1 (= 0 ULTIMATE.start_main_~s~0.offset)) (.cse2 (not (= ULTIMATE.start_main_~s~0.base .cse9))) (.cse0 (<= .cse17 ULTIMATE.start_main_~len~0)) (.cse11 (not (= ULTIMATE.start_dll_create_~head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~head~0.base) 4)))) (.cse10 (not (= ULTIMATE.start_dll_create_~new_head~0.base (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_create_~new_head~0.base) (+ ULTIMATE.start_dll_create_~new_head~0.offset 4))))) (.cse5 (<= ULTIMATE.start_main_~len~0 .cse17)) (.cse12 (= 0 ULTIMATE.start_dll_create_~new_head~0.offset)) (.cse13 (= 0 |ULTIMATE.start_dll_create_#res.offset|)) (.cse14 (= 0 ULTIMATE.start_dll_create_~head~0.offset)) (.cse4 (<= ULTIMATE.start_main_~len~0 2)) (.cse7 (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)) (.cse15 (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_dll_create_#res.base|) 4) |ULTIMATE.start_dll_create_#res.base|))) (.cse16 (<= 2 ULTIMATE.start_main_~len~0)) (.cse6 (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))) (.cse8 (= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base)))) (or (let ((.cse3 (select (select |#memory_int| .cse9) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)))) (and .cse0 .cse1 .cse2 (<= 2 ULTIMATE.start_main_~i~0) (<= (+ ULTIMATE.start_main_~i~0 1) .cse3) .cse4 .cse5 (<= .cse3 (+ ULTIMATE.start_main_~len~0 1)) .cse6 (not .cse7) .cse8 (<= ULTIMATE.start_dll_update_at_~index 0))) (and .cse1 .cse10 .cse11 .cse12 .cse13 .cse14 .cse2 (= 0 ULTIMATE.start_main_~i~0) .cse4 .cse15 .cse16 .cse6 .cse8) (and (<= 1 ULTIMATE.start_main_~i~0) .cse0 .cse11 .cse10 .cse5 .cse12 .cse13 (= ULTIMATE.start_main_~s~0.offset ULTIMATE.start_dll_update_at_~head.offset) .cse14 (= 0 ULTIMATE.start_dll_update_at_~index) (<= ULTIMATE.start_dll_update_at_~data ULTIMATE.start_main_~len~0) .cse4 (not (= (select (select |#memory_$Pointer$.base| ULTIMATE.start_dll_update_at_~head.base) (+ ULTIMATE.start_dll_update_at_~head.offset 4)) ULTIMATE.start_main_~s~0.base)) .cse7 .cse15 .cse16 .cse6 (<= ULTIMATE.start_main_~len~0 ULTIMATE.start_dll_update_at_~data) .cse8 (= 0 ULTIMATE.start_dll_update_at_~head.offset) (<= ULTIMATE.start_main_~i~0 1))))) [2020-07-28 18:06:21,778 INFO L268 CegarLoopResult]: For program point L618-3(lines 618 621) no Hoare annotation was computed. [2020-07-28 18:06:21,778 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 18:06:21,779 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 630) no Hoare annotation was computed. [2020-07-28 18:06:21,779 INFO L268 CegarLoopResult]: For program point L578(lines 578 580) no Hoare annotation was computed. [2020-07-28 18:06:21,779 INFO L268 CegarLoopResult]: For program point L578-1(lines 578 580) no Hoare annotation was computed. [2020-07-28 18:06:21,779 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 18:06:21,780 INFO L271 CegarLoopResult]: At program point L562(line 562) the Hoare annotation is: true [2020-07-28 18:06:21,780 INFO L264 CegarLoopResult]: At program point L604(lines 599 605) the Hoare annotation is: (let ((.cse6 (select (select |#memory_$Pointer$.base| ULTIMATE.start_main_~s~0.base) 4))) (let ((.cse14 (select (select |#memory_int| ULTIMATE.start_dll_get_data_at_~head.base) ULTIMATE.start_dll_get_data_at_~head.offset)) (.cse10 (+ ULTIMATE.start_main_~len~0 1)) (.cse9 (select (select |#memory_int| .cse6) (select (select |#memory_$Pointer$.offset| ULTIMATE.start_main_~s~0.base) 4)))) (let ((.cse4 (<= |ULTIMATE.start_dll_get_data_at_#res| ULTIMATE.start_main_~expected~0)) (.cse1 (= 0 ULTIMATE.start_main_~s~0.offset)) (.cse5 (<= ULTIMATE.start_main_~expected~0 |ULTIMATE.start_dll_get_data_at_#res|)) (.cse7 (<= .cse10 .cse9)) (.cse8 (<= ULTIMATE.start_main_~len~0 2)) (.cse2 (<= ULTIMATE.start_main_~expected~0 .cse14)) (.cse3 (<= .cse14 ULTIMATE.start_main_~expected~0)) (.cse11 (= 1 (select |#valid| ULTIMATE.start_dll_create_~new_head~0.base))) (.cse12 (= 1 (select |#valid| ULTIMATE.start_dll_create_~head~0.base))) (.cse13 (<= ULTIMATE.start_dll_update_at_~index 0))) (or (let ((.cse0 (select (select |#memory_int| ULTIMATE.start_main_~s~0.base) ULTIMATE.start_main_~s~0.offset))) (and (<= .cse0 ULTIMATE.start_main_~len~0) .cse1 .cse2 (<= ULTIMATE.start_main_~len~0 .cse0) .cse3 (not (= ULTIMATE.start_main_~s~0.base ULTIMATE.start_dll_update_at_~head.base)) .cse4 .cse5 (not (= ULTIMATE.start_main_~s~0.base .cse6)) .cse7 (= 0 ULTIMATE.start_main_~i~0) .cse8 (<= .cse9 .cse10) (<= 2 ULTIMATE.start_main_~len~0) .cse11 (= 0 ULTIMATE.start_dll_get_data_at_~index) .cse12 .cse13)) (and .cse4 .cse1 .cse5 .cse7 .cse8 (<= (+ ULTIMATE.start_main_~i~0 1) ULTIMATE.start_main_~len~0) .cse2 .cse3 .cse11 (<= .cse9 (+ ULTIMATE.start_main_~len~0 ULTIMATE.start_main_~i~0)) .cse12 .cse13))))) [2020-07-28 18:06:21,785 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 18:06:21,785 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 18:06:21,785 WARN L170 areAnnotationChecker]: L576-3 has no Hoare annotation [2020-07-28 18:06:21,785 WARN L170 areAnnotationChecker]: L576-3 has no Hoare annotation [2020-07-28 18:06:21,786 WARN L170 areAnnotationChecker]: L578 has no Hoare annotation [2020-07-28 18:06:21,786 WARN L170 areAnnotationChecker]: L576-3 has no Hoare annotation [2020-07-28 18:06:21,786 WARN L170 areAnnotationChecker]: L578 has no Hoare annotation [2020-07-28 18:06:21,786 WARN L170 areAnnotationChecker]: L578 has no Hoare annotation [2020-07-28 18:06:21,793 WARN L170 areAnnotationChecker]: L578-1 has no Hoare annotation [2020-07-28 18:06:21,793 WARN L170 areAnnotationChecker]: L618-3 has no Hoare annotation [2020-07-28 18:06:21,793 WARN L170 areAnnotationChecker]: L618-3 has no Hoare annotation [2020-07-28 18:06:21,797 WARN L170 areAnnotationChecker]: L584 has no Hoare annotation [2020-07-28 18:06:21,797 WARN L170 areAnnotationChecker]: L584 has no Hoare annotation [2020-07-28 18:06:21,797 WARN L170 areAnnotationChecker]: L618-3 has no Hoare annotation [2020-07-28 18:06:21,797 WARN L170 areAnnotationChecker]: L607-3 has no Hoare annotation [2020-07-28 18:06:21,798 WARN L170 areAnnotationChecker]: L607-3 has no Hoare annotation [2020-07-28 18:06:21,802 WARN L170 areAnnotationChecker]: L584-2 has no Hoare annotation [2020-07-28 18:06:21,802 WARN L170 areAnnotationChecker]: L622-4 has no Hoare annotation [2020-07-28 18:06:21,802 WARN L170 areAnnotationChecker]: L622-4 has no Hoare annotation [2020-07-28 18:06:21,806 WARN L170 areAnnotationChecker]: L607-3 has no Hoare annotation [2020-07-28 18:06:21,806 WARN L170 areAnnotationChecker]: L622-4 has no Hoare annotation [2020-07-28 18:06:21,806 WARN L170 areAnnotationChecker]: L600-3 has no Hoare annotation [2020-07-28 18:06:21,806 WARN L170 areAnnotationChecker]: L600-3 has no Hoare annotation [2020-07-28 18:06:21,809 WARN L170 areAnnotationChecker]: L606 has no Hoare annotation [2020-07-28 18:06:21,810 WARN L170 areAnnotationChecker]: L592 has no Hoare annotation [2020-07-28 18:06:21,810 WARN L170 areAnnotationChecker]: L592 has no Hoare annotation [2020-07-28 18:06:21,810 WARN L170 areAnnotationChecker]: L600-3 has no Hoare annotation [2020-07-28 18:06:21,810 WARN L170 areAnnotationChecker]: L592 has no Hoare annotation [2020-07-28 18:06:21,810 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2020-07-28 18:06:21,810 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 18:06:21,810 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2020-07-28 18:06:21,810 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2020-07-28 18:06:21,810 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 18:06:21,810 WARN L170 areAnnotationChecker]: ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION has no Hoare annotation [2020-07-28 18:06:21,811 WARN L170 areAnnotationChecker]: L622-2 has no Hoare annotation [2020-07-28 18:06:21,811 INFO L163 areAnnotationChecker]: CFG has 8 edges. 8 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 18:06:21,815 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,816 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,817 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,820 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,820 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,821 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,833 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,833 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,834 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,835 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,838 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,839 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,841 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,841 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,843 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,849 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,849 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,850 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,851 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,853 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,859 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,860 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,860 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,861 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,862 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,862 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,864 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,866 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,867 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,867 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,869 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,870 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,870 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,877 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,878 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,878 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,878 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,879 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,879 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,879 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,880 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,880 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,880 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,881 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,882 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,882 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,882 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,886 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,886 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,887 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,887 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,888 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,890 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,891 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,892 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,893 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,894 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,895 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,896 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,897 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,901 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,902 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,903 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,904 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,905 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,908 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,908 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,909 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,909 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,909 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,909 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,910 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,910 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,910 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,911 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,911 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,912 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,912 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,913 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,913 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,913 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,914 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,914 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,914 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,921 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,922 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,923 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,923 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,924 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,925 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,925 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,925 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,926 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,926 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,927 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,927 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,927 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,929 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,930 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,931 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,932 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,937 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,937 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,938 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,938 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,939 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,939 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,939 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,940 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,940 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,940 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,941 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,941 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,941 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,942 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,942 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,942 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,943 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,943 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,943 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,944 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,944 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,946 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,947 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,947 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,951 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,952 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,952 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,953 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,954 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,954 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,955 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,955 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,956 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,956 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,956 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,957 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,957 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,958 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,960 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,960 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,961 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,961 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,961 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,962 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,962 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,962 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,962 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,963 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,963 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,963 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,964 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,964 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,964 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,965 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,965 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,965 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,965 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,966 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,966 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,970 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,970 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,971 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,971 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,971 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,972 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,972 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,972 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,973 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,974 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,974 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,975 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,975 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,975 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,976 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,976 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,976 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,977 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,977 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,977 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,978 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,978 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,978 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,979 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,979 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,979 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,980 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,980 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,981 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,981 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,982 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,982 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,982 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,983 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,985 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,985 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,986 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,987 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,988 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,988 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,988 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,989 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,989 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,989 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,990 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,990 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,990 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,990 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,991 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,991 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,991 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,992 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,992 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,992 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:21,992 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,993 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:21,994 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,995 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,996 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,996 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,996 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,997 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,997 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,998 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,998 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,998 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:21,999 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:21,999 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,000 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,000 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,001 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,001 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,001 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,003 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,004 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,004 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,004 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,005 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,005 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,005 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,006 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,006 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,006 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,006 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,007 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,008 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,009 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,009 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,010 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,010 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,010 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,010 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,011 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,011 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,011 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,012 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,012 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,013 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,013 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,013 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,014 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,014 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,014 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,014 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,015 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,016 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,016 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,016 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,017 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,017 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,018 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,018 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,018 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,019 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,019 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,019 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,020 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,020 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,020 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,021 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,021 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,023 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,024 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,024 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,024 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,025 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,025 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,025 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,026 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,026 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,026 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,027 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,027 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,027 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,028 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,028 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,028 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,029 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,029 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,029 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,030 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,030 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,030 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,031 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,031 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,031 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,031 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,032 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,032 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,032 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,032 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,033 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,035 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,035 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,035 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,036 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,036 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,037 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,037 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,038 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,038 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,039 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,039 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,040 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,040 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,040 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,041 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,041 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,041 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,041 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,042 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,042 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,042 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,043 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,043 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,043 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,044 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,045 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,045 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,045 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,046 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,046 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,047 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,047 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,048 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,050 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,050 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,051 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,051 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,052 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,052 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,053 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,053 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,053 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,054 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,054 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,054 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,055 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,055 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,055 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,059 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 06:06:22 BoogieIcfgContainer [2020-07-28 18:06:22,060 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 18:06:22,060 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 18:06:22,060 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 18:06:22,061 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 18:06:22,061 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 06:05:40" (3/4) ... [2020-07-28 18:06:22,068 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 18:06:22,085 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2020-07-28 18:06:22,086 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 18:06:22,086 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 18:06:22,119 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(head == #memory_$Pointer$[head][4]) && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && len <= 2) && 0 == new_head) && 0 == \result) && !(#memory_$Pointer$[\result][4] == \result)) && 2 <= len) && 1 == \valid[new_head]) && 1 == \valid[head]) && 0 == head [2020-07-28 18:06:22,120 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((unknown-#memory_int-unknown[s][s] <= len && 0 == s) && !(s == #memory_$Pointer$[s][4])) && 2 <= i) && i + 1 <= unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]]) && len <= 2) && len <= unknown-#memory_int-unknown[s][s]) && unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]] <= len + 1) && 1 == \valid[new_head]) && !(s == head)) && 1 == \valid[head]) && index <= 0) || ((((((((((((0 == s && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && !(head == #memory_$Pointer$[head][4])) && 0 == new_head) && 0 == \result) && 0 == head) && !(s == #memory_$Pointer$[s][4])) && 0 == i) && len <= 2) && !(#memory_$Pointer$[\result][4] == \result)) && 2 <= len) && 1 == \valid[new_head]) && 1 == \valid[head])) || ((((((((((((((((((((1 <= i && unknown-#memory_int-unknown[s][s] <= len) && !(head == #memory_$Pointer$[head][4])) && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && len <= unknown-#memory_int-unknown[s][s]) && 0 == new_head) && 0 == \result) && s == head) && 0 == head) && 0 == index) && data <= len) && len <= 2) && !(#memory_$Pointer$[head][head + 4] == s)) && s == head) && !(#memory_$Pointer$[\result][4] == \result)) && 2 <= len) && 1 == \valid[new_head]) && len <= data) && 1 == \valid[head]) && 0 == head) && i <= 1) [2020-07-28 18:06:22,122 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((#memory_$Pointer$[s] == #memory_$Pointer$[head] && 1 <= i) && unknown-#memory_int-unknown[s][s] <= len) && data <= len + 1) && 0 == s) && !(head == #memory_$Pointer$[head][4])) && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && len <= unknown-#memory_int-unknown[s][s]) && 0 == new_head) && 0 == \result) && 0 == head) && #memory_$Pointer$[s] == #memory_$Pointer$[head]) && index <= 1) && len <= 2) && i + 2 <= data) && !(#memory_$Pointer$[head][head + 4] == s)) && 1 <= index) && !(#memory_$Pointer$[\result][4] == \result)) && 1 == \valid[new_head]) && 1 == \valid[head]) && 0 == head) || ((((((((((((((((((#memory_$Pointer$[s][4] == head && 1 <= i) && unknown-#memory_int-unknown[s][s] <= len) && data <= len + 1) && 0 == s) && !(head == #memory_$Pointer$[head][4])) && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && #memory_$Pointer$[s][4] == head) && len <= unknown-#memory_int-unknown[s][s]) && 0 == new_head) && 0 == \result) && !(s == head)) && 0 == head) && len <= 2) && i + 2 <= data) && !(#memory_$Pointer$[\result][4] == \result)) && 1 == \valid[new_head]) && 1 == \valid[head]) && index <= 0)) || ((((((((((((((((!(head == #memory_$Pointer$[head][4]) && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && s == head) && 0 == new_head) && 0 == \result) && 0 == head) && 0 == index) && data <= len) && !(s == #memory_$Pointer$[s][4])) && 0 == i) && i + 2 <= data) && len <= 2) && s == head) && !(#memory_$Pointer$[\result][4] == \result)) && 1 == \valid[new_head]) && 1 == \valid[head]) && 0 == head) [2020-07-28 18:06:22,123 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((unknown-#memory_int-unknown[s][s] <= len && 0 == s) && expected <= unknown-#memory_int-unknown[head][head]) && len <= unknown-#memory_int-unknown[s][s]) && unknown-#memory_int-unknown[head][head] <= expected) && !(s == head)) && \result <= expected) && expected <= \result) && !(s == #memory_$Pointer$[s][4])) && len + 1 <= unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]]) && 0 == i) && len <= 2) && unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]] <= len + 1) && 2 <= len) && 1 == \valid[new_head]) && 0 == index) && 1 == \valid[head]) && index <= 0) || (((((((((((\result <= expected && 0 == s) && expected <= \result) && len + 1 <= unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]]) && len <= 2) && i + 1 <= len) && expected <= unknown-#memory_int-unknown[head][head]) && unknown-#memory_int-unknown[head][head] <= expected) && 1 == \valid[new_head]) && unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]] <= len + i) && 1 == \valid[head]) && index <= 0) [2020-07-28 18:06:22,152 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 18:06:22,153 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 18:06:22,156 INFO L168 Benchmark]: Toolchain (without parser) took 42628.02 ms. Allocated memory was 1.0 GB in the beginning and 1.6 GB in the end (delta: 529.5 MB). Free memory was 956.2 MB in the beginning and 844.5 MB in the end (delta: 111.7 MB). Peak memory consumption was 641.3 MB. Max. memory is 11.5 GB. [2020-07-28 18:06:22,156 INFO L168 Benchmark]: CDTParser took 0.30 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 18:06:22,157 INFO L168 Benchmark]: CACSL2BoogieTranslator took 608.27 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 140.0 MB). Free memory was 950.8 MB in the beginning and 1.1 GB in the end (delta: -158.7 MB). Peak memory consumption was 20.7 MB. Max. memory is 11.5 GB. [2020-07-28 18:06:22,158 INFO L168 Benchmark]: Boogie Procedure Inliner took 65.90 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2020-07-28 18:06:22,158 INFO L168 Benchmark]: Boogie Preprocessor took 36.60 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 18:06:22,161 INFO L168 Benchmark]: RCFGBuilder took 630.95 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 37.7 MB). Peak memory consumption was 37.7 MB. Max. memory is 11.5 GB. [2020-07-28 18:06:22,162 INFO L168 Benchmark]: TraceAbstraction took 41184.36 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 389.5 MB). Free memory was 1.1 GB in the beginning and 858.3 MB in the end (delta: 206.9 MB). Peak memory consumption was 596.4 MB. Max. memory is 11.5 GB. [2020-07-28 18:06:22,164 INFO L168 Benchmark]: Witness Printer took 92.78 ms. Allocated memory is still 1.6 GB. Free memory was 858.3 MB in the beginning and 844.5 MB in the end (delta: 13.9 MB). Peak memory consumption was 13.9 MB. Max. memory is 11.5 GB. [2020-07-28 18:06:22,168 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 608.27 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 140.0 MB). Free memory was 950.8 MB in the beginning and 1.1 GB in the end (delta: -158.7 MB). Peak memory consumption was 20.7 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 65.90 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 36.60 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 630.95 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 37.7 MB). Peak memory consumption was 37.7 MB. Max. memory is 11.5 GB. * TraceAbstraction took 41184.36 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 389.5 MB). Free memory was 1.1 GB in the beginning and 858.3 MB in the end (delta: 206.9 MB). Peak memory consumption was 596.4 MB. Max. memory is 11.5 GB. * Witness Printer took 92.78 ms. Allocated memory is still 1.6 GB. Free memory was 858.3 MB in the beginning and 844.5 MB in the end (delta: 13.9 MB). Peak memory consumption was 13.9 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base - GenericResult: Unfinished Backtranslation Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_int - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ - GenericResult: Unfinished Backtranslation unknown boogie variable #memory_$Pointer$ * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 630]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 574]: Loop Invariant [2020-07-28 18:06:22,208 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,208 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,208 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,209 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,209 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,210 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,213 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,214 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,214 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,215 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,215 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,215 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ Derived loop invariant: ((((((((!(head == #memory_$Pointer$[head][4]) && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && len <= 2) && 0 == new_head) && 0 == \result) && !(#memory_$Pointer$[\result][4] == \result)) && 2 <= len) && 1 == \valid[new_head]) && 1 == \valid[head]) && 0 == head - InvariantResult [Line: 576]: Loop Invariant [2020-07-28 18:06:22,216 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,216 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,217 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,217 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,218 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,218 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,225 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,225 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ Derived loop invariant: (((((len <= 2 && 1 <= len) && 2 <= len) && 1 == \valid[new_head]) && 1 == \valid[head]) || (((((((!(head == #memory_$Pointer$[head][4]) && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && len <= 2) && 0 == new_head) && 2 <= len) && 1 == \valid[new_head]) && 1 == \valid[head]) && 0 == head)) || ((((head == 0 && len <= 2) && 2 <= len) && 2 == len) && 0 == head) - InvariantResult [Line: 618]: Loop Invariant [2020-07-28 18:06:22,226 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,226 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,226 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,226 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,226 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,227 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,227 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,228 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,229 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,229 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,230 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,230 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,230 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,232 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,233 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,233 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,233 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,234 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,234 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,234 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,235 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,235 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,235 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,236 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,236 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,236 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,237 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,237 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,237 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,238 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,238 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,238 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,240 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,240 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,240 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,241 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,241 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,241 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,242 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,242 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,243 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,243 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,243 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,244 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,244 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,246 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,247 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,247 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,247 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,248 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,248 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,248 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,249 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,249 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,249 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,249 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,250 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,250 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,250 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,251 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,251 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,252 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,252 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,252 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ Derived loop invariant: ((((((((((((unknown-#memory_int-unknown[s][s] <= len && 0 == s) && !(s == #memory_$Pointer$[s][4])) && 2 <= i) && i + 1 <= unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]]) && len <= 2) && len <= unknown-#memory_int-unknown[s][s]) && unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]] <= len + 1) && 1 == \valid[new_head]) && !(s == head)) && 1 == \valid[head]) && index <= 0) || ((((((((((((0 == s && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && !(head == #memory_$Pointer$[head][4])) && 0 == new_head) && 0 == \result) && 0 == head) && !(s == #memory_$Pointer$[s][4])) && 0 == i) && len <= 2) && !(#memory_$Pointer$[\result][4] == \result)) && 2 <= len) && 1 == \valid[new_head]) && 1 == \valid[head])) || ((((((((((((((((((((1 <= i && unknown-#memory_int-unknown[s][s] <= len) && !(head == #memory_$Pointer$[head][4])) && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && len <= unknown-#memory_int-unknown[s][s]) && 0 == new_head) && 0 == \result) && s == head) && 0 == head) && 0 == index) && data <= len) && len <= 2) && !(#memory_$Pointer$[head][head + 4] == s)) && s == head) && !(#memory_$Pointer$[\result][4] == \result)) && 2 <= len) && 1 == \valid[new_head]) && len <= data) && 1 == \valid[head]) && 0 == head) && i <= 1) - InvariantResult [Line: 607]: Loop Invariant [2020-07-28 18:06:22,253 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,254 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,254 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,255 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,255 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,255 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,256 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,256 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,257 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,257 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,257 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,259 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,259 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,260 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,260 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,261 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,261 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,263 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,263 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,264 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,264 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,264 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,265 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,265 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,265 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,266 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,266 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,266 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,267 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,267 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,268 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,268 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,268 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,269 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,269 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,269 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,270 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,270 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,270 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,271 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,271 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,272 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,272 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,273 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,273 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,273 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,274 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,274 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,274 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,275 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,275 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,275 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,276 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,276 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,276 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,278 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,279 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,279 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,280 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,280 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,280 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,281 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,281 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,281 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,282 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,282 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,282 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,283 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,283 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,283 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,284 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,284 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,284 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,285 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,285 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,285 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ Derived loop invariant: (((((((((((((((((((((#memory_$Pointer$[s] == #memory_$Pointer$[head] && 1 <= i) && unknown-#memory_int-unknown[s][s] <= len) && data <= len + 1) && 0 == s) && !(head == #memory_$Pointer$[head][4])) && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && len <= unknown-#memory_int-unknown[s][s]) && 0 == new_head) && 0 == \result) && 0 == head) && #memory_$Pointer$[s] == #memory_$Pointer$[head]) && index <= 1) && len <= 2) && i + 2 <= data) && !(#memory_$Pointer$[head][head + 4] == s)) && 1 <= index) && !(#memory_$Pointer$[\result][4] == \result)) && 1 == \valid[new_head]) && 1 == \valid[head]) && 0 == head) || ((((((((((((((((((#memory_$Pointer$[s][4] == head && 1 <= i) && unknown-#memory_int-unknown[s][s] <= len) && data <= len + 1) && 0 == s) && !(head == #memory_$Pointer$[head][4])) && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && #memory_$Pointer$[s][4] == head) && len <= unknown-#memory_int-unknown[s][s]) && 0 == new_head) && 0 == \result) && !(s == head)) && 0 == head) && len <= 2) && i + 2 <= data) && !(#memory_$Pointer$[\result][4] == \result)) && 1 == \valid[new_head]) && 1 == \valid[head]) && index <= 0)) || ((((((((((((((((!(head == #memory_$Pointer$[head][4]) && !(new_head == #memory_$Pointer$[new_head][new_head + 4])) && s == head) && 0 == new_head) && 0 == \result) && 0 == head) && 0 == index) && data <= len) && !(s == #memory_$Pointer$[s][4])) && 0 == i) && i + 2 <= data) && len <= 2) && s == head) && !(#memory_$Pointer$[\result][4] == \result)) && 1 == \valid[new_head]) && 1 == \valid[head]) && 0 == head) - InvariantResult [Line: 562]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 613]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 599]: Loop Invariant [2020-07-28 18:06:22,287 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,287 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,288 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,288 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,288 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,289 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,289 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,290 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,290 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,291 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,291 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,292 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,292 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,293 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,293 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,293 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,294 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,294 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,294 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,294 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,295 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,295 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,295 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,296 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,296 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,296 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,296 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,297 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,298 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,299 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,299 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,299 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,300 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,300 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,300 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,301 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,301 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,302 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,303 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,303 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,303 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,304 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,304 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,304 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,305 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,305 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,305 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,306 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,306 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,306 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,307 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,307 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,307 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,308 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,308 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,308 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ Derived loop invariant: (((((((((((((((((unknown-#memory_int-unknown[s][s] <= len && 0 == s) && expected <= unknown-#memory_int-unknown[head][head]) && len <= unknown-#memory_int-unknown[s][s]) && unknown-#memory_int-unknown[head][head] <= expected) && !(s == head)) && \result <= expected) && expected <= \result) && !(s == #memory_$Pointer$[s][4])) && len + 1 <= unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]]) && 0 == i) && len <= 2) && unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]] <= len + 1) && 2 <= len) && 1 == \valid[new_head]) && 0 == index) && 1 == \valid[head]) && index <= 0) || (((((((((((\result <= expected && 0 == s) && expected <= \result) && len + 1 <= unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]]) && len <= 2) && i + 1 <= len) && expected <= unknown-#memory_int-unknown[head][head]) && unknown-#memory_int-unknown[head][head] <= expected) && 1 == \valid[new_head]) && unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]] <= len + i) && 1 == \valid[head]) && index <= 0) - InvariantResult [Line: 613]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 600]: Loop Invariant [2020-07-28 18:06:22,309 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,309 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,310 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,310 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,310 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,311 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,311 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,311 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,311 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,312 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,312 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,312 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,313 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,313 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,313 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,314 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,314 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,315 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,316 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,316 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,316 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,317 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,317 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,317 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,317 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,318 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,318 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,331 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,332 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,332 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,332 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,332 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,332 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,332 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,333 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,333 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,333 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,333 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,334 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,337 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,338 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,338 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,338 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,339 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,339 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,339 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,339 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,340 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,340 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,341 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,341 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,341 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,342 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,342 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,342 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,343 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,343 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,343 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,344 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,344 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,344 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,347 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,347 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,348 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,348 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,350 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,350 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,351 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,351 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,351 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,352 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,352 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,352 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,352 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,353 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,353 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,353 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,353 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,354 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,354 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,354 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,355 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,355 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,355 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,355 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,356 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,356 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,356 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,356 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,357 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,357 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,357 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,358 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,359 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,359 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,360 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ Derived loop invariant: ((((((((((((0 == s && len + 1 <= unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]]) && len <= 2) && expected <= unknown-#memory_int-unknown[head][head]) && unknown-#memory_int-unknown[head][head] <= expected) && 2 <= len) && 1 == \valid[new_head]) && unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]] <= len + i) && 1 == \valid[head]) && index <= 0) && index <= 0) && i <= 1) || (((((((((((((((unknown-#memory_int-unknown[s][s] <= len && 0 == s) && expected <= unknown-#memory_int-unknown[head][head]) && len <= unknown-#memory_int-unknown[s][s]) && unknown-#memory_int-unknown[head][head] <= expected) && !(s == head)) && !(s == #memory_$Pointer$[s][4])) && len + 1 <= unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]]) && 0 == i) && len <= 2) && unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]] <= len + 1) && 2 <= len) && 1 == \valid[new_head]) && 0 == index) && 1 == \valid[head]) && index <= 0)) || (((((((((((((0 == s && unknown-#memory_int-unknown[#memory_$Pointer$[head][head + 4]][#memory_$Pointer$[head][head + 4]] <= expected) && expected <= unknown-#memory_int-unknown[#memory_$Pointer$[head][head + 4]][#memory_$Pointer$[head][head + 4]]) && 1 <= index) && index <= 1) && 0 == head) && len + 1 <= unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]]) && len <= 2) && 2 <= len) && 1 == \valid[new_head]) && unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]] <= len + i) && 1 == \valid[head]) && index <= 0) && i <= 1) - InvariantResult [Line: 622]: Loop Invariant [2020-07-28 18:06:22,361 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,361 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,361 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,362 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,362 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,362 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,362 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,363 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,364 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,365 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,365 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,365 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,366 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,366 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,366 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,366 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,367 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,367 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,367 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,367 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,368 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,368 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,368 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,368 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,371 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,371 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,372 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,372 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,372 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,373 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,373 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,373 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.base [2020-07-28 18:06:22,374 WARN L417 cessorBacktranslator]: Unfinished backtranslation: Name guessing unsuccessful for VarDecl var #memory_$Pointer$ : [$Pointer$]$Pointer$; and expression #memory_$Pointer$.offset [2020-07-28 18:06:22,375 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,375 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,375 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,375 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,376 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,376 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,376 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,377 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,377 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,377 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,377 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,378 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,378 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_int [2020-07-28 18:06:22,378 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ [2020-07-28 18:06:22,378 WARN L1295 BoogieBacktranslator]: unknown boogie variable #memory_$Pointer$ Derived loop invariant: ((((((((((((((unknown-#memory_int-unknown[s][s] <= len && 0 == s) && len <= unknown-#memory_int-unknown[s][s]) && !(s == head)) && !(s == #memory_$Pointer$[s][4])) && 0 == i) && len + 1 <= unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]]) && len <= 2) && 0 <= i) && unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]] <= len + 1) && 1 == \valid[new_head]) && 2 <= len) && 1 == \valid[head]) && index <= 0) || ((((((2 <= i && 0 <= i) && len <= 2) && 1 == \valid[new_head]) && 2 <= len) && 1 == \valid[head]) && index <= 0)) || (((((((((0 == s && len + 1 <= unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]]) && len <= 2) && 0 <= i) && 1 == \valid[new_head]) && 2 <= len) && unknown-#memory_int-unknown[#memory_$Pointer$[s][4]][#memory_$Pointer$[s][4]] <= len + i) && 1 == \valid[head]) && index <= 0) && index <= 0) - InvariantResult [Line: 593]: Loop Invariant Derived loop invariant: 1 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 29 locations, 1 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 37.0s, OverallIterations: 14, TraceHistogramMax: 3, AutomataDifference: 23.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 329 SDtfs, 1014 SDslu, 1091 SDs, 0 SdLazy, 1902 SolverSat, 362 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 4.6s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 481 GetRequests, 276 SyntacticMatches, 4 SemanticMatches, 201 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2156 ImplicationChecksByTransitivity, 11.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=50occurred in iteration=11, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 171 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 11 LocationsWithAnnotation, 11 PreInvPairs, 33 NumberOfFragments, 1333 HoareAnnotationTreeSize, 11 FomulaSimplifications, 47363 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 11 FomulaSimplificationsInter, 18997 FormulaSimplificationTreeSizeReductionInter, 3.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.8s SatisfiabilityAnalysisTime, 7.7s InterpolantComputationTime, 712 NumberOfCodeBlocks, 709 NumberOfCodeBlocksAsserted, 28 NumberOfCheckSat, 689 ConstructedInterpolants, 22 QuantifiedInterpolants, 140319 SizeOfPredicates, 96 NumberOfNonLiveVariables, 1600 ConjunctsInSsa, 195 ConjunctsInUnsatCore, 23 InterpolantComputations, 6 PerfectInterpolantSequences, 258/354 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...