./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 20ed64ec Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3a4526955ec47ece593df350860d30065bd0ba55 .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-dev-20ed64e [2021-08-26 08:31:39,194 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-08-26 08:31:39,196 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-08-26 08:31:39,238 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-08-26 08:31:39,239 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-08-26 08:31:39,243 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-08-26 08:31:39,244 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-08-26 08:31:39,250 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-08-26 08:31:39,252 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-08-26 08:31:39,258 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-08-26 08:31:39,259 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-08-26 08:31:39,263 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-08-26 08:31:39,263 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-08-26 08:31:39,265 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-08-26 08:31:39,267 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-08-26 08:31:39,269 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-08-26 08:31:39,272 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-08-26 08:31:39,273 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-08-26 08:31:39,274 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-08-26 08:31:39,276 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-08-26 08:31:39,277 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-08-26 08:31:39,278 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-08-26 08:31:39,279 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-08-26 08:31:39,279 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-08-26 08:31:39,282 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-08-26 08:31:39,282 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-08-26 08:31:39,282 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-08-26 08:31:39,283 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-08-26 08:31:39,283 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-08-26 08:31:39,284 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-08-26 08:31:39,284 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-08-26 08:31:39,285 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-08-26 08:31:39,286 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-08-26 08:31:39,286 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-08-26 08:31:39,287 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-08-26 08:31:39,287 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-08-26 08:31:39,288 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-08-26 08:31:39,288 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-08-26 08:31:39,289 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-08-26 08:31:39,290 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-08-26 08:31:39,290 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-08-26 08:31:39,291 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-08-26 08:31:39,315 INFO L113 SettingsManager]: Loading preferences was successful [2021-08-26 08:31:39,316 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-08-26 08:31:39,318 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-08-26 08:31:39,318 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-08-26 08:31:39,319 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-08-26 08:31:39,320 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-08-26 08:31:39,320 INFO L138 SettingsManager]: * Use SBE=true [2021-08-26 08:31:39,320 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-08-26 08:31:39,320 INFO L138 SettingsManager]: * sizeof long=4 [2021-08-26 08:31:39,321 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-08-26 08:31:39,321 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-08-26 08:31:39,322 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-08-26 08:31:39,322 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-08-26 08:31:39,322 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-08-26 08:31:39,322 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-08-26 08:31:39,322 INFO L138 SettingsManager]: * sizeof long double=12 [2021-08-26 08:31:39,322 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-08-26 08:31:39,323 INFO L138 SettingsManager]: * Use constant arrays=true [2021-08-26 08:31:39,323 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-08-26 08:31:39,323 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-08-26 08:31:39,323 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-08-26 08:31:39,323 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-08-26 08:31:39,324 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-08-26 08:31:39,324 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-08-26 08:31:39,324 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-08-26 08:31:39,324 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-08-26 08:31:39,324 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-08-26 08:31:39,325 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-08-26 08:31:39,325 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-08-26 08:31:39,325 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-08-26 08:31:39,325 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3a4526955ec47ece593df350860d30065bd0ba55 [2021-08-26 08:31:39,671 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-08-26 08:31:39,702 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-08-26 08:31:39,704 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-08-26 08:31:39,706 INFO L271 PluginConnector]: Initializing CDTParser... [2021-08-26 08:31:39,706 INFO L275 PluginConnector]: CDTParser initialized [2021-08-26 08:31:39,707 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2021-08-26 08:31:39,781 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9012f1446/b2de751caa0649daab97470c01c56a8d/FLAG86de473d9 [2021-08-26 08:31:40,363 INFO L306 CDTParser]: Found 1 translation units. [2021-08-26 08:31:40,364 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2021-08-26 08:31:40,380 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9012f1446/b2de751caa0649daab97470c01c56a8d/FLAG86de473d9 [2021-08-26 08:31:40,777 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9012f1446/b2de751caa0649daab97470c01c56a8d [2021-08-26 08:31:40,779 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-08-26 08:31:40,780 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-08-26 08:31:40,781 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-08-26 08:31:40,782 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-08-26 08:31:40,784 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-08-26 08:31:40,785 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.08 08:31:40" (1/1) ... [2021-08-26 08:31:40,786 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@211bb327 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:40, skipping insertion in model container [2021-08-26 08:31:40,786 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.08 08:31:40" (1/1) ... [2021-08-26 08:31:40,805 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-08-26 08:31:40,854 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-08-26 08:31:41,147 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c[12205,12218] [2021-08-26 08:31:41,378 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-08-26 08:31:41,393 INFO L203 MainTranslator]: Completed pre-run [2021-08-26 08:31:41,430 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c[12205,12218] [2021-08-26 08:31:41,516 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-08-26 08:31:41,544 INFO L208 MainTranslator]: Completed translation [2021-08-26 08:31:41,545 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:41 WrapperNode [2021-08-26 08:31:41,546 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-08-26 08:31:41,548 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-08-26 08:31:41,549 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-08-26 08:31:41,549 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-08-26 08:31:41,555 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:41" (1/1) ... [2021-08-26 08:31:41,599 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:41" (1/1) ... [2021-08-26 08:31:41,681 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-08-26 08:31:41,682 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-08-26 08:31:41,682 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-08-26 08:31:41,682 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-08-26 08:31:41,689 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:41" (1/1) ... [2021-08-26 08:31:41,689 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:41" (1/1) ... [2021-08-26 08:31:41,698 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:41" (1/1) ... [2021-08-26 08:31:41,699 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:41" (1/1) ... [2021-08-26 08:31:41,746 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:41" (1/1) ... [2021-08-26 08:31:41,771 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:41" (1/1) ... [2021-08-26 08:31:41,778 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:41" (1/1) ... [2021-08-26 08:31:41,830 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-08-26 08:31:41,836 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-08-26 08:31:41,836 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-08-26 08:31:41,836 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-08-26 08:31:41,837 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:41" (1/1) ... [2021-08-26 08:31:41,842 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-08-26 08:31:41,848 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-08-26 08:31:41,862 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-08-26 08:31:41,883 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-08-26 08:31:41,913 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2021-08-26 08:31:41,913 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-08-26 08:31:41,914 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-08-26 08:31:41,914 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-08-26 08:31:41,914 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-08-26 08:31:44,048 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-08-26 08:31:44,048 INFO L299 CfgBuilder]: Removed 405 assume(true) statements. [2021-08-26 08:31:44,050 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.08 08:31:44 BoogieIcfgContainer [2021-08-26 08:31:44,050 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-08-26 08:31:44,052 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-08-26 08:31:44,052 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-08-26 08:31:44,054 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-08-26 08:31:44,054 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.08 08:31:40" (1/3) ... [2021-08-26 08:31:44,055 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2a921eb6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.08 08:31:44, skipping insertion in model container [2021-08-26 08:31:44,055 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:31:41" (2/3) ... [2021-08-26 08:31:44,055 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2a921eb6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.08 08:31:44, skipping insertion in model container [2021-08-26 08:31:44,056 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.08 08:31:44" (3/3) ... [2021-08-26 08:31:44,057 INFO L111 eAbstractionObserver]: Analyzing ICFG email_spec0_product36.cil.c [2021-08-26 08:31:44,060 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-08-26 08:31:44,061 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 6 error locations. [2021-08-26 08:31:44,098 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-08-26 08:31:44,103 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-08-26 08:31:44,103 INFO L340 AbstractCegarLoop]: Starting to check reachability of 6 error locations. [2021-08-26 08:31:44,122 INFO L276 IsEmpty]: Start isEmpty. Operand has 477 states, 470 states have (on average 1.695744680851064) internal successors, (797), 476 states have internal predecessors, (797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:44,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-08-26 08:31:44,130 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:44,130 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:44,131 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:44,135 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:44,136 INFO L82 PathProgramCache]: Analyzing trace with hash 727264019, now seen corresponding path program 1 times [2021-08-26 08:31:44,142 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:44,143 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [610260993] [2021-08-26 08:31:44,143 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:44,144 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:44,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:44,391 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:31:44,392 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:44,392 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [610260993] [2021-08-26 08:31:44,393 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [610260993] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:44,393 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:44,393 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-08-26 08:31:44,416 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [546554190] [2021-08-26 08:31:44,420 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-08-26 08:31:44,420 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:44,429 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-08-26 08:31:44,430 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-08-26 08:31:44,433 INFO L87 Difference]: Start difference. First operand has 477 states, 470 states have (on average 1.695744680851064) internal successors, (797), 476 states have internal predecessors, (797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:44,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:44,481 INFO L93 Difference]: Finished difference Result 860 states and 1420 transitions. [2021-08-26 08:31:44,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-08-26 08:31:44,483 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2021-08-26 08:31:44,483 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:44,494 INFO L225 Difference]: With dead ends: 860 [2021-08-26 08:31:44,495 INFO L226 Difference]: Without dead ends: 449 [2021-08-26 08:31:44,499 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0ms TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-08-26 08:31:44,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2021-08-26 08:31:44,573 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 449. [2021-08-26 08:31:44,577 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 449 states, 443 states have (on average 1.6794582392776525) internal successors, (744), 448 states have internal predecessors, (744), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:44,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 449 states to 449 states and 744 transitions. [2021-08-26 08:31:44,584 INFO L78 Accepts]: Start accepts. Automaton has 449 states and 744 transitions. Word has length 41 [2021-08-26 08:31:44,584 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:44,584 INFO L470 AbstractCegarLoop]: Abstraction has 449 states and 744 transitions. [2021-08-26 08:31:44,584 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:44,585 INFO L276 IsEmpty]: Start isEmpty. Operand 449 states and 744 transitions. [2021-08-26 08:31:44,591 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2021-08-26 08:31:44,591 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:44,591 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:44,591 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-08-26 08:31:44,592 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:44,594 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:44,595 INFO L82 PathProgramCache]: Analyzing trace with hash 1990434142, now seen corresponding path program 1 times [2021-08-26 08:31:44,595 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:44,595 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1678053423] [2021-08-26 08:31:44,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:44,596 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:44,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:44,752 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:31:44,753 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:44,753 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1678053423] [2021-08-26 08:31:44,754 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1678053423] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:44,754 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:44,754 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-26 08:31:44,754 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1881383649] [2021-08-26 08:31:44,755 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-26 08:31:44,756 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:44,757 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-26 08:31:44,757 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:44,758 INFO L87 Difference]: Start difference. First operand 449 states and 744 transitions. Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:44,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:44,833 INFO L93 Difference]: Finished difference Result 1320 states and 2190 transitions. [2021-08-26 08:31:44,833 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-26 08:31:44,833 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2021-08-26 08:31:44,834 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:44,839 INFO L225 Difference]: With dead ends: 1320 [2021-08-26 08:31:44,839 INFO L226 Difference]: Without dead ends: 882 [2021-08-26 08:31:44,843 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 6.3ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:44,844 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 882 states. [2021-08-26 08:31:44,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 882 to 448. [2021-08-26 08:31:44,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 448 states, 442 states have (on average 1.6742081447963801) internal successors, (740), 447 states have internal predecessors, (740), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:44,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 740 transitions. [2021-08-26 08:31:44,856 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 740 transitions. Word has length 42 [2021-08-26 08:31:44,856 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:44,856 INFO L470 AbstractCegarLoop]: Abstraction has 448 states and 740 transitions. [2021-08-26 08:31:44,856 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:44,856 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 740 transitions. [2021-08-26 08:31:44,857 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2021-08-26 08:31:44,858 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:44,858 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:44,858 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-08-26 08:31:44,858 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:44,859 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:44,859 INFO L82 PathProgramCache]: Analyzing trace with hash -1205522101, now seen corresponding path program 1 times [2021-08-26 08:31:44,859 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:44,859 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [98521195] [2021-08-26 08:31:44,859 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:44,860 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:44,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:44,913 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:31:44,914 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:44,914 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [98521195] [2021-08-26 08:31:44,915 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [98521195] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:44,915 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:44,915 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-26 08:31:44,915 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [922827886] [2021-08-26 08:31:44,916 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-26 08:31:44,916 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:44,917 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-26 08:31:44,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:44,917 INFO L87 Difference]: Start difference. First operand 448 states and 740 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:44,967 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:44,967 INFO L93 Difference]: Finished difference Result 882 states and 1460 transitions. [2021-08-26 08:31:44,968 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-26 08:31:44,968 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2021-08-26 08:31:44,969 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:44,971 INFO L225 Difference]: With dead ends: 882 [2021-08-26 08:31:44,971 INFO L226 Difference]: Without dead ends: 449 [2021-08-26 08:31:44,972 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 3.3ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:44,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2021-08-26 08:31:44,980 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 448. [2021-08-26 08:31:44,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 448 states, 442 states have (on average 1.667420814479638) internal successors, (737), 447 states have internal predecessors, (737), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:44,982 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 737 transitions. [2021-08-26 08:31:44,982 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 737 transitions. Word has length 43 [2021-08-26 08:31:44,982 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:44,983 INFO L470 AbstractCegarLoop]: Abstraction has 448 states and 737 transitions. [2021-08-26 08:31:44,983 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:44,983 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 737 transitions. [2021-08-26 08:31:44,984 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-08-26 08:31:44,984 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:44,984 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:44,984 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-08-26 08:31:44,985 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:44,985 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:44,985 INFO L82 PathProgramCache]: Analyzing trace with hash 945994064, now seen corresponding path program 1 times [2021-08-26 08:31:44,985 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:44,986 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1971882059] [2021-08-26 08:31:44,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:44,986 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:45,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:45,042 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:31:45,042 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:45,043 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1971882059] [2021-08-26 08:31:45,043 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1971882059] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:45,043 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:45,043 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-26 08:31:45,043 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1504358323] [2021-08-26 08:31:45,044 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-26 08:31:45,044 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:45,045 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-26 08:31:45,045 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:45,045 INFO L87 Difference]: Start difference. First operand 448 states and 737 transitions. Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:45,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:45,063 INFO L93 Difference]: Finished difference Result 806 states and 1314 transitions. [2021-08-26 08:31:45,064 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-26 08:31:45,064 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2021-08-26 08:31:45,064 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:45,066 INFO L225 Difference]: With dead ends: 806 [2021-08-26 08:31:45,066 INFO L226 Difference]: Without dead ends: 451 [2021-08-26 08:31:45,067 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 3.3ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:45,068 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 451 states. [2021-08-26 08:31:45,075 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 451 to 450. [2021-08-26 08:31:45,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 450 states, 444 states have (on average 1.6644144144144144) internal successors, (739), 449 states have internal predecessors, (739), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:45,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 450 states to 450 states and 739 transitions. [2021-08-26 08:31:45,078 INFO L78 Accepts]: Start accepts. Automaton has 450 states and 739 transitions. Word has length 45 [2021-08-26 08:31:45,078 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:45,078 INFO L470 AbstractCegarLoop]: Abstraction has 450 states and 739 transitions. [2021-08-26 08:31:45,078 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:45,079 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 739 transitions. [2021-08-26 08:31:45,079 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-08-26 08:31:45,079 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:45,080 INFO L512 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:45,080 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-08-26 08:31:45,080 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:45,080 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:45,081 INFO L82 PathProgramCache]: Analyzing trace with hash -1740183871, now seen corresponding path program 1 times [2021-08-26 08:31:45,081 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:45,081 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [726475045] [2021-08-26 08:31:45,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:45,081 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:45,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:45,137 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:31:45,138 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:45,138 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [726475045] [2021-08-26 08:31:45,138 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [726475045] provided 0 perfect and 1 imperfect interpolant sequences [2021-08-26 08:31:45,138 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [275658431] [2021-08-26 08:31:45,139 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:45,139 INFO L170 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-08-26 08:31:45,139 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-08-26 08:31:45,141 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-08-26 08:31:45,174 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-08-26 08:31:45,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:45,592 INFO L263 TraceCheckSpWp]: Trace formula consists of 802 conjuncts, 3 conjunts are in the unsatisfiable core [2021-08-26 08:31:45,597 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-08-26 08:31:45,861 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:31:45,862 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [275658431] provided 0 perfect and 1 imperfect interpolant sequences [2021-08-26 08:31:45,862 INFO L186 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2021-08-26 08:31:45,862 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4] total 5 [2021-08-26 08:31:45,862 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1631984845] [2021-08-26 08:31:45,864 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-26 08:31:45,864 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:45,864 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-26 08:31:45,865 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:31:45,865 INFO L87 Difference]: Start difference. First operand 450 states and 739 transitions. Second operand has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:45,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:45,919 INFO L93 Difference]: Finished difference Result 1237 states and 2030 transitions. [2021-08-26 08:31:45,920 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-08-26 08:31:45,920 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2021-08-26 08:31:45,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:45,925 INFO L225 Difference]: With dead ends: 1237 [2021-08-26 08:31:45,925 INFO L226 Difference]: Without dead ends: 882 [2021-08-26 08:31:45,926 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 13.8ms TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:31:45,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 882 states. [2021-08-26 08:31:45,945 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 882 to 526. [2021-08-26 08:31:45,947 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 526 states, 520 states have (on average 1.6961538461538461) internal successors, (882), 525 states have internal predecessors, (882), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:45,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 526 states to 526 states and 882 transitions. [2021-08-26 08:31:45,949 INFO L78 Accepts]: Start accepts. Automaton has 526 states and 882 transitions. Word has length 50 [2021-08-26 08:31:45,950 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:45,950 INFO L470 AbstractCegarLoop]: Abstraction has 526 states and 882 transitions. [2021-08-26 08:31:45,951 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:45,951 INFO L276 IsEmpty]: Start isEmpty. Operand 526 states and 882 transitions. [2021-08-26 08:31:45,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-08-26 08:31:45,953 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:45,953 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:45,983 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-08-26 08:31:46,169 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-08-26 08:31:46,169 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:46,169 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:46,170 INFO L82 PathProgramCache]: Analyzing trace with hash 298481648, now seen corresponding path program 2 times [2021-08-26 08:31:46,170 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:46,170 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1318600952] [2021-08-26 08:31:46,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:46,170 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:46,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:46,228 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:31:46,229 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:46,229 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1318600952] [2021-08-26 08:31:46,230 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1318600952] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:46,230 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:46,230 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-26 08:31:46,231 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [549316215] [2021-08-26 08:31:46,232 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-26 08:31:46,237 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:46,238 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-26 08:31:46,241 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:46,241 INFO L87 Difference]: Start difference. First operand 526 states and 882 transitions. Second operand has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:46,274 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:46,274 INFO L93 Difference]: Finished difference Result 1389 states and 2316 transitions. [2021-08-26 08:31:46,275 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-26 08:31:46,275 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2021-08-26 08:31:46,275 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:46,279 INFO L225 Difference]: With dead ends: 1389 [2021-08-26 08:31:46,279 INFO L226 Difference]: Without dead ends: 958 [2021-08-26 08:31:46,280 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.9ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:46,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 958 states. [2021-08-26 08:31:46,298 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 958 to 603. [2021-08-26 08:31:46,300 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 597 states have (on average 1.7169179229480738) internal successors, (1025), 602 states have internal predecessors, (1025), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:46,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1025 transitions. [2021-08-26 08:31:46,302 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1025 transitions. Word has length 55 [2021-08-26 08:31:46,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:46,302 INFO L470 AbstractCegarLoop]: Abstraction has 603 states and 1025 transitions. [2021-08-26 08:31:46,302 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:46,303 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1025 transitions. [2021-08-26 08:31:46,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-08-26 08:31:46,303 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:46,304 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:46,304 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-08-26 08:31:46,305 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:46,305 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:46,305 INFO L82 PathProgramCache]: Analyzing trace with hash -226823759, now seen corresponding path program 1 times [2021-08-26 08:31:46,305 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:46,306 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2139254059] [2021-08-26 08:31:46,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:46,306 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:46,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:46,386 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-08-26 08:31:46,387 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:46,387 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2139254059] [2021-08-26 08:31:46,387 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2139254059] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:46,387 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:46,388 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-26 08:31:46,388 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [571273275] [2021-08-26 08:31:46,389 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-26 08:31:46,389 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:46,390 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-26 08:31:46,390 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:46,390 INFO L87 Difference]: Start difference. First operand 603 states and 1025 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:46,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:46,429 INFO L93 Difference]: Finished difference Result 1537 states and 2594 transitions. [2021-08-26 08:31:46,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-26 08:31:46,430 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-08-26 08:31:46,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:46,434 INFO L225 Difference]: With dead ends: 1537 [2021-08-26 08:31:46,434 INFO L226 Difference]: Without dead ends: 958 [2021-08-26 08:31:46,436 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 3.2ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:46,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 958 states. [2021-08-26 08:31:46,456 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 958 to 603. [2021-08-26 08:31:46,457 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 597 states have (on average 1.7135678391959799) internal successors, (1023), 602 states have internal predecessors, (1023), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:46,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1023 transitions. [2021-08-26 08:31:46,459 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1023 transitions. Word has length 57 [2021-08-26 08:31:46,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:46,461 INFO L470 AbstractCegarLoop]: Abstraction has 603 states and 1023 transitions. [2021-08-26 08:31:46,461 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:46,461 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1023 transitions. [2021-08-26 08:31:46,462 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-08-26 08:31:46,462 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:46,462 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:46,463 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-08-26 08:31:46,463 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:46,463 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:46,463 INFO L82 PathProgramCache]: Analyzing trace with hash -1735157297, now seen corresponding path program 2 times [2021-08-26 08:31:46,464 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:46,464 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2047990192] [2021-08-26 08:31:46,467 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:46,467 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:46,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:46,551 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-08-26 08:31:46,552 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:46,552 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2047990192] [2021-08-26 08:31:46,553 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2047990192] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:46,553 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:46,553 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-26 08:31:46,554 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [800390557] [2021-08-26 08:31:46,554 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-26 08:31:46,554 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:46,555 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-26 08:31:46,555 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:46,555 INFO L87 Difference]: Start difference. First operand 603 states and 1023 transitions. Second operand has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:46,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:46,597 INFO L93 Difference]: Finished difference Result 1674 states and 2848 transitions. [2021-08-26 08:31:46,598 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-26 08:31:46,598 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-08-26 08:31:46,598 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:46,603 INFO L225 Difference]: With dead ends: 1674 [2021-08-26 08:31:46,603 INFO L226 Difference]: Without dead ends: 1101 [2021-08-26 08:31:46,604 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 3.3ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:46,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1101 states. [2021-08-26 08:31:46,627 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1101 to 746. [2021-08-26 08:31:46,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 746 states, 740 states have (on average 1.7405405405405405) internal successors, (1288), 745 states have internal predecessors, (1288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:46,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 1288 transitions. [2021-08-26 08:31:46,631 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 1288 transitions. Word has length 57 [2021-08-26 08:31:46,631 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:46,631 INFO L470 AbstractCegarLoop]: Abstraction has 746 states and 1288 transitions. [2021-08-26 08:31:46,632 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:46,632 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 1288 transitions. [2021-08-26 08:31:46,633 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-08-26 08:31:46,633 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:46,633 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:46,634 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-08-26 08:31:46,634 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:46,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:46,634 INFO L82 PathProgramCache]: Analyzing trace with hash 1243815331, now seen corresponding path program 1 times [2021-08-26 08:31:46,635 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:46,635 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112689626] [2021-08-26 08:31:46,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:46,635 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:46,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:46,700 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-08-26 08:31:46,701 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:46,701 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112689626] [2021-08-26 08:31:46,701 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112689626] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:46,702 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:46,702 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-26 08:31:46,702 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [704186360] [2021-08-26 08:31:46,702 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-26 08:31:46,702 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:46,703 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-26 08:31:46,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:31:46,703 INFO L87 Difference]: Start difference. First operand 746 states and 1288 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:47,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:47,041 INFO L93 Difference]: Finished difference Result 1894 states and 3253 transitions. [2021-08-26 08:31:47,042 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-26 08:31:47,042 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2021-08-26 08:31:47,043 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:47,047 INFO L225 Difference]: With dead ends: 1894 [2021-08-26 08:31:47,048 INFO L226 Difference]: Without dead ends: 1244 [2021-08-26 08:31:47,049 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 29.0ms TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-08-26 08:31:47,050 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1244 states. [2021-08-26 08:31:47,074 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1244 to 746. [2021-08-26 08:31:47,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 746 states, 740 states have (on average 1.7364864864864864) internal successors, (1285), 745 states have internal predecessors, (1285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:47,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 1285 transitions. [2021-08-26 08:31:47,078 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 1285 transitions. Word has length 58 [2021-08-26 08:31:47,078 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:47,079 INFO L470 AbstractCegarLoop]: Abstraction has 746 states and 1285 transitions. [2021-08-26 08:31:47,079 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:47,079 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 1285 transitions. [2021-08-26 08:31:47,080 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-08-26 08:31:47,080 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:47,080 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:47,081 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-08-26 08:31:47,081 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:47,081 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:47,081 INFO L82 PathProgramCache]: Analyzing trace with hash -462083701, now seen corresponding path program 1 times [2021-08-26 08:31:47,082 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:47,082 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [465702899] [2021-08-26 08:31:47,082 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:47,082 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:47,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:47,225 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-08-26 08:31:47,225 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:47,225 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [465702899] [2021-08-26 08:31:47,226 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [465702899] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:47,228 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:47,228 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-08-26 08:31:47,228 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [191952107] [2021-08-26 08:31:47,231 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-08-26 08:31:47,232 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:47,232 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-08-26 08:31:47,233 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2021-08-26 08:31:47,233 INFO L87 Difference]: Start difference. First operand 746 states and 1285 transitions. Second operand has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:49,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:49,307 INFO L93 Difference]: Finished difference Result 3388 states and 5518 transitions. [2021-08-26 08:31:49,308 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-08-26 08:31:49,308 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2021-08-26 08:31:49,308 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:49,320 INFO L225 Difference]: With dead ends: 3388 [2021-08-26 08:31:49,321 INFO L226 Difference]: Without dead ends: 3094 [2021-08-26 08:31:49,322 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 208 ImplicationChecksByTransitivity, 451.4ms TimeCoverageRelationStatistics Valid=290, Invalid=766, Unknown=0, NotChecked=0, Total=1056 [2021-08-26 08:31:49,325 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3094 states. [2021-08-26 08:31:49,384 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3094 to 1013. [2021-08-26 08:31:49,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1013 states, 1007 states have (on average 1.6971201588877856) internal successors, (1709), 1012 states have internal predecessors, (1709), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:49,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1013 states to 1013 states and 1709 transitions. [2021-08-26 08:31:49,390 INFO L78 Accepts]: Start accepts. Automaton has 1013 states and 1709 transitions. Word has length 58 [2021-08-26 08:31:49,390 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:49,390 INFO L470 AbstractCegarLoop]: Abstraction has 1013 states and 1709 transitions. [2021-08-26 08:31:49,391 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:49,391 INFO L276 IsEmpty]: Start isEmpty. Operand 1013 states and 1709 transitions. [2021-08-26 08:31:49,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-08-26 08:31:49,392 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:49,392 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:49,393 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-08-26 08:31:49,393 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:49,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:49,394 INFO L82 PathProgramCache]: Analyzing trace with hash -1190675934, now seen corresponding path program 1 times [2021-08-26 08:31:49,394 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:49,394 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [192744622] [2021-08-26 08:31:49,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:49,394 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:49,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:49,521 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-08-26 08:31:49,522 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:49,522 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [192744622] [2021-08-26 08:31:49,522 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [192744622] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:49,522 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:49,522 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-08-26 08:31:49,523 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1214535975] [2021-08-26 08:31:49,523 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-08-26 08:31:49,523 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:49,524 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-08-26 08:31:49,524 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2021-08-26 08:31:49,524 INFO L87 Difference]: Start difference. First operand 1013 states and 1709 transitions. Second operand has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:51,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:51,624 INFO L93 Difference]: Finished difference Result 3650 states and 5919 transitions. [2021-08-26 08:31:51,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-08-26 08:31:51,624 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2021-08-26 08:31:51,624 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:51,636 INFO L225 Difference]: With dead ends: 3650 [2021-08-26 08:31:51,636 INFO L226 Difference]: Without dead ends: 3154 [2021-08-26 08:31:51,637 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 205 ImplicationChecksByTransitivity, 434.1ms TimeCoverageRelationStatistics Valid=290, Invalid=766, Unknown=0, NotChecked=0, Total=1056 [2021-08-26 08:31:51,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3154 states. [2021-08-26 08:31:51,706 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3154 to 1124. [2021-08-26 08:31:51,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1124 states, 1118 states have (on average 1.684257602862254) internal successors, (1883), 1123 states have internal predecessors, (1883), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:51,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1124 states to 1124 states and 1883 transitions. [2021-08-26 08:31:51,712 INFO L78 Accepts]: Start accepts. Automaton has 1124 states and 1883 transitions. Word has length 59 [2021-08-26 08:31:51,712 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:51,712 INFO L470 AbstractCegarLoop]: Abstraction has 1124 states and 1883 transitions. [2021-08-26 08:31:51,712 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:51,713 INFO L276 IsEmpty]: Start isEmpty. Operand 1124 states and 1883 transitions. [2021-08-26 08:31:51,714 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-08-26 08:31:51,714 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:51,714 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:51,714 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-08-26 08:31:51,715 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:51,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:51,715 INFO L82 PathProgramCache]: Analyzing trace with hash -1608706913, now seen corresponding path program 1 times [2021-08-26 08:31:51,715 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:51,716 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1611468987] [2021-08-26 08:31:51,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:51,716 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:51,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:51,814 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-08-26 08:31:51,814 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:51,814 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1611468987] [2021-08-26 08:31:51,814 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1611468987] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:51,815 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:51,815 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-08-26 08:31:51,815 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1225252909] [2021-08-26 08:31:51,815 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-08-26 08:31:51,815 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:51,816 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-08-26 08:31:51,816 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-08-26 08:31:51,816 INFO L87 Difference]: Start difference. First operand 1124 states and 1883 transitions. Second operand has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:52,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:52,123 INFO L93 Difference]: Finished difference Result 2109 states and 3448 transitions. [2021-08-26 08:31:52,124 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-08-26 08:31:52,124 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2021-08-26 08:31:52,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:52,129 INFO L225 Difference]: With dead ends: 2109 [2021-08-26 08:31:52,129 INFO L226 Difference]: Without dead ends: 1399 [2021-08-26 08:31:52,131 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 114.5ms TimeCoverageRelationStatistics Valid=74, Invalid=136, Unknown=0, NotChecked=0, Total=210 [2021-08-26 08:31:52,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1399 states. [2021-08-26 08:31:52,187 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1399 to 1046. [2021-08-26 08:31:52,189 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1046 states, 1040 states have (on average 1.6836538461538462) internal successors, (1751), 1045 states have internal predecessors, (1751), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:52,192 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1046 states to 1046 states and 1751 transitions. [2021-08-26 08:31:52,192 INFO L78 Accepts]: Start accepts. Automaton has 1046 states and 1751 transitions. Word has length 59 [2021-08-26 08:31:52,192 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:52,192 INFO L470 AbstractCegarLoop]: Abstraction has 1046 states and 1751 transitions. [2021-08-26 08:31:52,192 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:52,193 INFO L276 IsEmpty]: Start isEmpty. Operand 1046 states and 1751 transitions. [2021-08-26 08:31:52,194 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-08-26 08:31:52,194 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:52,194 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:52,194 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-08-26 08:31:52,194 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:52,195 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:52,195 INFO L82 PathProgramCache]: Analyzing trace with hash 1160689309, now seen corresponding path program 1 times [2021-08-26 08:31:52,195 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:52,195 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [450007501] [2021-08-26 08:31:52,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:52,195 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:52,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:52,255 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-08-26 08:31:52,255 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:52,256 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [450007501] [2021-08-26 08:31:52,256 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [450007501] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:52,256 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:52,256 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-26 08:31:52,256 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1111107050] [2021-08-26 08:31:52,257 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-26 08:31:52,257 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:52,257 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-26 08:31:52,257 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:31:52,258 INFO L87 Difference]: Start difference. First operand 1046 states and 1751 transitions. Second operand has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:52,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:52,613 INFO L93 Difference]: Finished difference Result 3655 states and 6060 transitions. [2021-08-26 08:31:52,613 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-08-26 08:31:52,613 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2021-08-26 08:31:52,614 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:52,625 INFO L225 Difference]: With dead ends: 3655 [2021-08-26 08:31:52,626 INFO L226 Difference]: Without dead ends: 3116 [2021-08-26 08:31:52,627 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 50.1ms TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-08-26 08:31:52,630 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3116 states. [2021-08-26 08:31:52,751 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3116 to 2000. [2021-08-26 08:31:52,755 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2000 states, 1994 states have (on average 1.6745235707121364) internal successors, (3339), 1999 states have internal predecessors, (3339), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:52,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2000 states to 2000 states and 3339 transitions. [2021-08-26 08:31:52,760 INFO L78 Accepts]: Start accepts. Automaton has 2000 states and 3339 transitions. Word has length 60 [2021-08-26 08:31:52,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:52,761 INFO L470 AbstractCegarLoop]: Abstraction has 2000 states and 3339 transitions. [2021-08-26 08:31:52,761 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:52,761 INFO L276 IsEmpty]: Start isEmpty. Operand 2000 states and 3339 transitions. [2021-08-26 08:31:52,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-08-26 08:31:52,763 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:52,763 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:52,763 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-08-26 08:31:52,763 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:52,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:52,764 INFO L82 PathProgramCache]: Analyzing trace with hash 1162684893, now seen corresponding path program 1 times [2021-08-26 08:31:52,764 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:52,764 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2132554907] [2021-08-26 08:31:52,764 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:52,764 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:52,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:52,867 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-08-26 08:31:52,867 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:52,867 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2132554907] [2021-08-26 08:31:52,868 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2132554907] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:52,868 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:52,868 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-08-26 08:31:52,868 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [153052989] [2021-08-26 08:31:52,868 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-08-26 08:31:52,869 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:52,869 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-08-26 08:31:52,869 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2021-08-26 08:31:52,869 INFO L87 Difference]: Start difference. First operand 2000 states and 3339 transitions. Second operand has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:54,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:54,543 INFO L93 Difference]: Finished difference Result 6190 states and 9970 transitions. [2021-08-26 08:31:54,544 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-08-26 08:31:54,544 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2021-08-26 08:31:54,544 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:54,563 INFO L225 Difference]: With dead ends: 6190 [2021-08-26 08:31:54,563 INFO L226 Difference]: Without dead ends: 5030 [2021-08-26 08:31:54,566 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 186 ImplicationChecksByTransitivity, 367.6ms TimeCoverageRelationStatistics Valid=268, Invalid=662, Unknown=0, NotChecked=0, Total=930 [2021-08-26 08:31:54,569 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5030 states. [2021-08-26 08:31:54,758 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5030 to 2639. [2021-08-26 08:31:54,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2639 states, 2633 states have (on average 1.645271553361185) internal successors, (4332), 2638 states have internal predecessors, (4332), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:54,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2639 states to 2639 states and 4332 transitions. [2021-08-26 08:31:54,770 INFO L78 Accepts]: Start accepts. Automaton has 2639 states and 4332 transitions. Word has length 61 [2021-08-26 08:31:54,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:54,770 INFO L470 AbstractCegarLoop]: Abstraction has 2639 states and 4332 transitions. [2021-08-26 08:31:54,771 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:54,771 INFO L276 IsEmpty]: Start isEmpty. Operand 2639 states and 4332 transitions. [2021-08-26 08:31:54,773 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-08-26 08:31:54,773 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:54,773 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:54,773 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-08-26 08:31:54,774 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:54,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:54,774 INFO L82 PathProgramCache]: Analyzing trace with hash 1212942047, now seen corresponding path program 1 times [2021-08-26 08:31:54,774 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:54,775 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [474655412] [2021-08-26 08:31:54,775 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:54,775 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:54,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:54,845 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-08-26 08:31:54,846 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:54,846 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [474655412] [2021-08-26 08:31:54,846 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [474655412] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:54,846 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:54,846 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-26 08:31:54,848 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1723429824] [2021-08-26 08:31:54,849 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-08-26 08:31:54,849 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:54,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-08-26 08:31:54,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-26 08:31:54,850 INFO L87 Difference]: Start difference. First operand 2639 states and 4332 transitions. Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:55,085 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:55,085 INFO L93 Difference]: Finished difference Result 3927 states and 6332 transitions. [2021-08-26 08:31:55,089 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-08-26 08:31:55,089 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 62 [2021-08-26 08:31:55,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:55,095 INFO L225 Difference]: With dead ends: 3927 [2021-08-26 08:31:55,096 INFO L226 Difference]: Without dead ends: 2623 [2021-08-26 08:31:55,098 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 12.4ms TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:31:55,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2623 states. [2021-08-26 08:31:55,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2623 to 1982. [2021-08-26 08:31:55,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1982 states, 1976 states have (on average 1.6634615384615385) internal successors, (3287), 1981 states have internal predecessors, (3287), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:55,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1982 states to 1982 states and 3287 transitions. [2021-08-26 08:31:55,219 INFO L78 Accepts]: Start accepts. Automaton has 1982 states and 3287 transitions. Word has length 62 [2021-08-26 08:31:55,219 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:55,220 INFO L470 AbstractCegarLoop]: Abstraction has 1982 states and 3287 transitions. [2021-08-26 08:31:55,220 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:55,220 INFO L276 IsEmpty]: Start isEmpty. Operand 1982 states and 3287 transitions. [2021-08-26 08:31:55,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-08-26 08:31:55,222 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:55,222 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:55,222 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-08-26 08:31:55,222 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:55,223 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:55,223 INFO L82 PathProgramCache]: Analyzing trace with hash 737410204, now seen corresponding path program 1 times [2021-08-26 08:31:55,223 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:55,223 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1712950009] [2021-08-26 08:31:55,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:55,224 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:55,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:55,292 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-08-26 08:31:55,293 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:55,293 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1712950009] [2021-08-26 08:31:55,293 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1712950009] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:55,293 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:55,293 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-26 08:31:55,294 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1562146063] [2021-08-26 08:31:55,294 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-26 08:31:55,294 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:55,294 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-26 08:31:55,295 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:31:55,295 INFO L87 Difference]: Start difference. First operand 1982 states and 3287 transitions. Second operand has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:55,596 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:55,597 INFO L93 Difference]: Finished difference Result 5624 states and 9108 transitions. [2021-08-26 08:31:55,597 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-08-26 08:31:55,597 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2021-08-26 08:31:55,597 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:55,606 INFO L225 Difference]: With dead ends: 5624 [2021-08-26 08:31:55,606 INFO L226 Difference]: Without dead ends: 4452 [2021-08-26 08:31:55,609 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 41.1ms TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-08-26 08:31:55,612 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4452 states. [2021-08-26 08:31:55,816 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4452 to 3216. [2021-08-26 08:31:55,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3216 states, 3210 states have (on average 1.6763239875389409) internal successors, (5381), 3215 states have internal predecessors, (5381), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:55,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3216 states to 3216 states and 5381 transitions. [2021-08-26 08:31:55,827 INFO L78 Accepts]: Start accepts. Automaton has 3216 states and 5381 transitions. Word has length 66 [2021-08-26 08:31:55,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:55,827 INFO L470 AbstractCegarLoop]: Abstraction has 3216 states and 5381 transitions. [2021-08-26 08:31:55,828 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:55,828 INFO L276 IsEmpty]: Start isEmpty. Operand 3216 states and 5381 transitions. [2021-08-26 08:31:55,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-08-26 08:31:55,831 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:55,831 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:55,831 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2021-08-26 08:31:55,832 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:55,832 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:55,832 INFO L82 PathProgramCache]: Analyzing trace with hash -2115831750, now seen corresponding path program 1 times [2021-08-26 08:31:55,832 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:55,832 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1249828557] [2021-08-26 08:31:55,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:55,833 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:55,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:55,872 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-08-26 08:31:55,873 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:55,873 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1249828557] [2021-08-26 08:31:55,873 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1249828557] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:55,873 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:55,873 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-26 08:31:55,874 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1450056496] [2021-08-26 08:31:55,874 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-26 08:31:55,874 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:55,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-26 08:31:55,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:55,875 INFO L87 Difference]: Start difference. First operand 3216 states and 5381 transitions. Second operand has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:56,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:56,207 INFO L93 Difference]: Finished difference Result 9456 states and 15823 transitions. [2021-08-26 08:31:56,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-26 08:31:56,207 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2021-08-26 08:31:56,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:56,228 INFO L225 Difference]: With dead ends: 9456 [2021-08-26 08:31:56,229 INFO L226 Difference]: Without dead ends: 6274 [2021-08-26 08:31:56,234 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.7ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:56,240 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6274 states. [2021-08-26 08:31:56,446 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6274 to 4370. [2021-08-26 08:31:56,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4370 states, 4364 states have (on average 1.722731439046746) internal successors, (7518), 4369 states have internal predecessors, (7518), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:56,502 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4370 states to 4370 states and 7518 transitions. [2021-08-26 08:31:56,503 INFO L78 Accepts]: Start accepts. Automaton has 4370 states and 7518 transitions. Word has length 66 [2021-08-26 08:31:56,503 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:56,503 INFO L470 AbstractCegarLoop]: Abstraction has 4370 states and 7518 transitions. [2021-08-26 08:31:56,504 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:56,504 INFO L276 IsEmpty]: Start isEmpty. Operand 4370 states and 7518 transitions. [2021-08-26 08:31:56,514 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-08-26 08:31:56,514 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:56,514 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:56,514 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-08-26 08:31:56,514 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:56,515 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:56,515 INFO L82 PathProgramCache]: Analyzing trace with hash -245114945, now seen corresponding path program 1 times [2021-08-26 08:31:56,515 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:56,515 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [323065445] [2021-08-26 08:31:56,515 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:56,515 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:56,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:56,581 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-08-26 08:31:56,581 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:56,582 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [323065445] [2021-08-26 08:31:56,582 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [323065445] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:56,582 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:56,582 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-26 08:31:56,582 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [298235170] [2021-08-26 08:31:56,584 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-26 08:31:56,584 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:56,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-26 08:31:56,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:31:56,585 INFO L87 Difference]: Start difference. First operand 4370 states and 7518 transitions. Second operand has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:56,893 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:56,893 INFO L93 Difference]: Finished difference Result 6478 states and 10803 transitions. [2021-08-26 08:31:56,893 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-26 08:31:56,894 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2021-08-26 08:31:56,894 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:56,903 INFO L225 Difference]: With dead ends: 6478 [2021-08-26 08:31:56,903 INFO L226 Difference]: Without dead ends: 4606 [2021-08-26 08:31:56,907 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 24.8ms TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-08-26 08:31:56,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4606 states. [2021-08-26 08:31:57,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4606 to 3908. [2021-08-26 08:31:57,157 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3908 states, 3902 states have (on average 1.7391081496668375) internal successors, (6786), 3907 states have internal predecessors, (6786), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:57,164 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3908 states to 3908 states and 6786 transitions. [2021-08-26 08:31:57,165 INFO L78 Accepts]: Start accepts. Automaton has 3908 states and 6786 transitions. Word has length 67 [2021-08-26 08:31:57,165 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:57,165 INFO L470 AbstractCegarLoop]: Abstraction has 3908 states and 6786 transitions. [2021-08-26 08:31:57,165 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:57,166 INFO L276 IsEmpty]: Start isEmpty. Operand 3908 states and 6786 transitions. [2021-08-26 08:31:57,170 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-08-26 08:31:57,170 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:57,171 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:57,171 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2021-08-26 08:31:57,171 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:57,172 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:57,172 INFO L82 PathProgramCache]: Analyzing trace with hash 167071917, now seen corresponding path program 1 times [2021-08-26 08:31:57,172 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:57,172 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [505831399] [2021-08-26 08:31:57,172 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:57,172 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:57,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:57,211 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-08-26 08:31:57,212 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:57,212 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [505831399] [2021-08-26 08:31:57,212 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [505831399] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:57,212 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:57,212 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-26 08:31:57,213 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1842961425] [2021-08-26 08:31:57,214 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-26 08:31:57,214 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:57,214 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-26 08:31:57,214 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:57,215 INFO L87 Difference]: Start difference. First operand 3908 states and 6786 transitions. Second operand has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:57,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:57,493 INFO L93 Difference]: Finished difference Result 11510 states and 20000 transitions. [2021-08-26 08:31:57,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-26 08:31:57,494 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2021-08-26 08:31:57,494 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:57,514 INFO L225 Difference]: With dead ends: 11510 [2021-08-26 08:31:57,514 INFO L226 Difference]: Without dead ends: 7640 [2021-08-26 08:31:57,521 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 3.2ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:57,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7640 states. [2021-08-26 08:31:57,757 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7640 to 6198. [2021-08-26 08:31:57,765 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6198 states, 6192 states have (on average 1.7782622739018088) internal successors, (11011), 6197 states have internal predecessors, (11011), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:57,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6198 states to 6198 states and 11011 transitions. [2021-08-26 08:31:57,778 INFO L78 Accepts]: Start accepts. Automaton has 6198 states and 11011 transitions. Word has length 67 [2021-08-26 08:31:57,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:57,779 INFO L470 AbstractCegarLoop]: Abstraction has 6198 states and 11011 transitions. [2021-08-26 08:31:57,779 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:57,779 INFO L276 IsEmpty]: Start isEmpty. Operand 6198 states and 11011 transitions. [2021-08-26 08:31:57,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-08-26 08:31:57,788 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:57,788 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:57,788 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2021-08-26 08:31:57,788 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:57,789 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:57,789 INFO L82 PathProgramCache]: Analyzing trace with hash -268562696, now seen corresponding path program 1 times [2021-08-26 08:31:57,789 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:57,789 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [302158617] [2021-08-26 08:31:57,789 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:57,790 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:57,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:57,825 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-08-26 08:31:57,825 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:57,825 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [302158617] [2021-08-26 08:31:57,826 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [302158617] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:57,826 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:57,826 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-26 08:31:57,826 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [677160178] [2021-08-26 08:31:57,826 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-26 08:31:57,827 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:57,827 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-26 08:31:57,827 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:57,828 INFO L87 Difference]: Start difference. First operand 6198 states and 11011 transitions. Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:58,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:58,157 INFO L93 Difference]: Finished difference Result 18342 states and 32605 transitions. [2021-08-26 08:31:58,157 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-26 08:31:58,158 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2021-08-26 08:31:58,158 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:58,180 INFO L225 Difference]: With dead ends: 18342 [2021-08-26 08:31:58,181 INFO L226 Difference]: Without dead ends: 12186 [2021-08-26 08:31:58,191 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.6ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:31:58,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12186 states. [2021-08-26 08:31:58,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12186 to 10744. [2021-08-26 08:31:58,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10744 states, 10738 states have (on average 1.8033153287390575) internal successors, (19364), 10743 states have internal predecessors, (19364), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:58,525 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10744 states to 10744 states and 19364 transitions. [2021-08-26 08:31:58,525 INFO L78 Accepts]: Start accepts. Automaton has 10744 states and 19364 transitions. Word has length 68 [2021-08-26 08:31:58,526 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:58,526 INFO L470 AbstractCegarLoop]: Abstraction has 10744 states and 19364 transitions. [2021-08-26 08:31:58,526 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:58,526 INFO L276 IsEmpty]: Start isEmpty. Operand 10744 states and 19364 transitions. [2021-08-26 08:31:58,539 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-08-26 08:31:58,539 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:31:58,539 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:31:58,539 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2021-08-26 08:31:58,539 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-08-26 08:31:58,540 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:31:58,540 INFO L82 PathProgramCache]: Analyzing trace with hash -552890897, now seen corresponding path program 1 times [2021-08-26 08:31:58,540 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:31:58,540 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [975094601] [2021-08-26 08:31:58,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:31:58,541 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:31:58,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:31:58,590 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-08-26 08:31:58,590 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:31:58,591 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [975094601] [2021-08-26 08:31:58,591 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [975094601] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:31:58,591 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:31:58,591 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-26 08:31:58,591 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [108027337] [2021-08-26 08:31:58,592 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-08-26 08:31:58,592 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:31:58,592 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-08-26 08:31:58,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-26 08:31:58,592 INFO L87 Difference]: Start difference. First operand 10744 states and 19364 transitions. Second operand has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:59,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:31:59,076 INFO L93 Difference]: Finished difference Result 11460 states and 20513 transitions. [2021-08-26 08:31:59,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-08-26 08:31:59,077 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2021-08-26 08:31:59,077 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:31:59,077 INFO L225 Difference]: With dead ends: 11460 [2021-08-26 08:31:59,077 INFO L226 Difference]: Without dead ends: 0 [2021-08-26 08:31:59,085 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 12.9ms TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:31:59,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-08-26 08:31:59,086 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-08-26 08:31:59,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:59,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-08-26 08:31:59,086 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 69 [2021-08-26 08:31:59,086 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:31:59,087 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-08-26 08:31:59,087 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:31:59,087 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-08-26 08:31:59,087 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-08-26 08:31:59,089 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-08-26 08:31:59,090 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-08-26 08:31:59,090 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-08-26 08:31:59,090 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION [2021-08-26 08:31:59,090 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION [2021-08-26 08:31:59,091 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION [2021-08-26 08:31:59,091 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2021-08-26 08:31:59,092 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-08-26 08:31:59,100 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:31:59,804 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:00,010 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:00,169 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:00,396 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:00,419 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:00,571 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:00,649 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:00,715 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:01,103 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:01,196 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:01,254 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:01,577 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:01,801 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:01,821 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:01,822 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:01,940 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:01,964 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:02,273 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:02,274 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:02,275 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:02,486 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:02,678 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:02,756 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:02,757 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:02,917 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:02,969 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,051 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,087 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,161 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,207 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,333 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,445 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,492 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,653 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,772 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,802 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,803 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,889 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,890 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:03,891 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:04,163 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:04,324 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:04,325 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:04,325 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:04,389 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:04,449 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:04,545 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:04,718 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:04,823 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:04,923 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:05,134 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:05,192 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:05,248 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:05,355 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:05,501 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:05,551 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:05,776 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:05,938 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:05,968 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:05,993 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:06,064 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:06,095 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:06,166 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:06,269 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:06,352 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:06,569 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:06,610 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:06,638 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:06,640 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:06,641 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:06,683 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:06,947 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:07,023 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:07,024 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:07,158 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:07,395 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:07,560 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:07,583 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:07,584 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:07,654 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:07,725 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,001 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,002 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,017 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,334 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,349 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,358 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,496 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,519 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,554 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,555 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,728 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,753 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,777 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:08,858 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,091 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,136 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,238 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,294 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,336 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,406 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,434 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,480 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,481 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,550 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,567 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,715 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,768 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,842 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,884 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:09,943 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:10,014 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:10,047 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:10,075 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:10,102 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:10,129 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:10,171 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:10,485 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:10,646 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:10,717 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:10,759 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:10,829 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:10,852 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,127 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,210 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,449 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,515 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,516 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,516 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,573 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,738 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,739 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,772 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,806 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,861 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,861 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:11,889 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:12,129 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:12,184 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:12,213 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:12,228 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:12,261 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:12,290 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:12,300 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:12,442 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:12,514 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:12,537 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:12,815 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:12,859 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:32:13,096 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:33:06,146 INFO L857 garLoopResultBuilder]: For program point L631(lines 631 647) no Hoare annotation was computed. [2021-08-26 08:33:06,146 INFO L857 garLoopResultBuilder]: For program point L631-1(lines 631 647) no Hoare annotation was computed. [2021-08-26 08:33:06,146 INFO L857 garLoopResultBuilder]: For program point L1953(lines 1953 1959) no Hoare annotation was computed. [2021-08-26 08:33:06,147 INFO L857 garLoopResultBuilder]: For program point L1953-1(lines 1953 1959) no Hoare annotation was computed. [2021-08-26 08:33:06,147 INFO L857 garLoopResultBuilder]: For program point L1953-2(lines 1953 1959) no Hoare annotation was computed. [2021-08-26 08:33:06,147 INFO L857 garLoopResultBuilder]: For program point L1953-3(lines 1953 1959) no Hoare annotation was computed. [2021-08-26 08:33:06,147 INFO L857 garLoopResultBuilder]: For program point L1953-4(lines 1953 1959) no Hoare annotation was computed. [2021-08-26 08:33:06,147 INFO L857 garLoopResultBuilder]: For program point L1953-5(lines 1953 1959) no Hoare annotation was computed. [2021-08-26 08:33:06,147 INFO L857 garLoopResultBuilder]: For program point L1953-6(lines 1953 1959) no Hoare annotation was computed. [2021-08-26 08:33:06,147 INFO L857 garLoopResultBuilder]: For program point L1953-7(lines 1953 1959) no Hoare annotation was computed. [2021-08-26 08:33:06,147 INFO L857 garLoopResultBuilder]: For program point L1689(lines 1689 1708) no Hoare annotation was computed. [2021-08-26 08:33:06,148 INFO L857 garLoopResultBuilder]: For program point L1953-8(lines 1953 1959) no Hoare annotation was computed. [2021-08-26 08:33:06,148 INFO L857 garLoopResultBuilder]: For program point L1689-1(lines 1689 1708) no Hoare annotation was computed. [2021-08-26 08:33:06,148 INFO L857 garLoopResultBuilder]: For program point L1953-9(lines 1953 1959) no Hoare annotation was computed. [2021-08-26 08:33:06,148 INFO L857 garLoopResultBuilder]: For program point L1953-10(lines 1953 1959) no Hoare annotation was computed. [2021-08-26 08:33:06,148 INFO L857 garLoopResultBuilder]: For program point L1953-11(lines 1953 1959) no Hoare annotation was computed. [2021-08-26 08:33:06,148 INFO L857 garLoopResultBuilder]: For program point L2351(lines 2351 2491) no Hoare annotation was computed. [2021-08-26 08:33:06,148 INFO L853 garLoopResultBuilder]: At program point L1823(lines 1818 1826) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,149 INFO L860 garLoopResultBuilder]: At program point L2616(lines 2598 2618) the Hoare annotation is: true [2021-08-26 08:33:06,149 INFO L857 garLoopResultBuilder]: For program point L635(lines 635 646) no Hoare annotation was computed. [2021-08-26 08:33:06,149 INFO L857 garLoopResultBuilder]: For program point L635-1(lines 635 646) no Hoare annotation was computed. [2021-08-26 08:33:06,149 INFO L853 garLoopResultBuilder]: At program point L1958(lines 1945 1963) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)))) [2021-08-26 08:33:06,149 INFO L853 garLoopResultBuilder]: At program point L1958-1(lines 1945 1963) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,149 INFO L853 garLoopResultBuilder]: At program point L1958-2(lines 1945 1963) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,150 INFO L853 garLoopResultBuilder]: At program point L1958-3(lines 1945 1963) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,150 INFO L853 garLoopResultBuilder]: At program point L1958-4(lines 1945 1963) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-08-26 08:33:06,150 INFO L853 garLoopResultBuilder]: At program point L1958-5(lines 1945 1963) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,150 INFO L853 garLoopResultBuilder]: At program point L1958-6(lines 1945 1963) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,150 INFO L853 garLoopResultBuilder]: At program point L1958-7(lines 1945 1963) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,151 INFO L853 garLoopResultBuilder]: At program point L1958-8(lines 1945 1963) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-08-26 08:33:06,151 INFO L860 garLoopResultBuilder]: At program point L1958-9(lines 1945 1963) the Hoare annotation is: true [2021-08-26 08:33:06,151 INFO L853 garLoopResultBuilder]: At program point L1958-10(lines 1945 1963) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-08-26 08:33:06,151 INFO L860 garLoopResultBuilder]: At program point L1958-11(lines 1945 1963) the Hoare annotation is: true [2021-08-26 08:33:06,151 INFO L857 garLoopResultBuilder]: For program point L2355(lines 2355 2359) no Hoare annotation was computed. [2021-08-26 08:33:06,151 INFO L857 garLoopResultBuilder]: For program point L639(lines 639 645) no Hoare annotation was computed. [2021-08-26 08:33:06,151 INFO L857 garLoopResultBuilder]: For program point L639-1(lines 639 645) no Hoare annotation was computed. [2021-08-26 08:33:06,152 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION(line 478) no Hoare annotation was computed. [2021-08-26 08:33:06,152 INFO L853 garLoopResultBuilder]: At program point L1832(lines 1827 1835) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,152 INFO L853 garLoopResultBuilder]: At program point L2493(lines 2342 2494) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~bob~0 1) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-08-26 08:33:06,152 INFO L853 garLoopResultBuilder]: At program point L2361(lines 2351 2491) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,152 INFO L857 garLoopResultBuilder]: For program point L1040(lines 1040 1056) no Hoare annotation was computed. [2021-08-26 08:33:06,152 INFO L857 garLoopResultBuilder]: For program point L1040-1(lines 1040 1056) no Hoare annotation was computed. [2021-08-26 08:33:06,152 INFO L857 garLoopResultBuilder]: For program point L1040-2(lines 1040 1056) no Hoare annotation was computed. [2021-08-26 08:33:06,152 INFO L857 garLoopResultBuilder]: For program point L1040-3(lines 1040 1056) no Hoare annotation was computed. [2021-08-26 08:33:06,152 INFO L857 garLoopResultBuilder]: For program point L1040-4(lines 1040 1056) no Hoare annotation was computed. [2021-08-26 08:33:06,152 INFO L857 garLoopResultBuilder]: For program point L1040-5(lines 1040 1056) no Hoare annotation was computed. [2021-08-26 08:33:06,152 INFO L853 garLoopResultBuilder]: At program point L644(lines 627 650) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,152 INFO L853 garLoopResultBuilder]: At program point L644-1(lines 627 650) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,153 INFO L857 garLoopResultBuilder]: For program point L1968(lines 1968 1976) no Hoare annotation was computed. [2021-08-26 08:33:06,153 INFO L857 garLoopResultBuilder]: For program point L1968-2(lines 1968 1976) no Hoare annotation was computed. [2021-08-26 08:33:06,153 INFO L857 garLoopResultBuilder]: For program point L1968-4(lines 1968 1976) no Hoare annotation was computed. [2021-08-26 08:33:06,153 INFO L857 garLoopResultBuilder]: For program point L1968-6(lines 1968 1976) no Hoare annotation was computed. [2021-08-26 08:33:06,153 INFO L857 garLoopResultBuilder]: For program point L1968-8(lines 1968 1976) no Hoare annotation was computed. [2021-08-26 08:33:06,153 INFO L857 garLoopResultBuilder]: For program point L1968-10(lines 1968 1976) no Hoare annotation was computed. [2021-08-26 08:33:06,153 INFO L857 garLoopResultBuilder]: For program point L1968-12(lines 1968 1976) no Hoare annotation was computed. [2021-08-26 08:33:06,153 INFO L857 garLoopResultBuilder]: For program point L1044(lines 1044 1055) no Hoare annotation was computed. [2021-08-26 08:33:06,153 INFO L857 garLoopResultBuilder]: For program point L1044-1(lines 1044 1055) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L1044-2(lines 1044 1055) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L1044-3(lines 1044 1055) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L912(lines 912 973) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L1044-4(lines 1044 1055) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L912-1(lines 912 973) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L1044-5(lines 1044 1055) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L912-2(lines 912 973) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L912-3(lines 912 973) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L2366(lines 2366 2373) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L913(lines 913 929) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L913-1(lines 913 929) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L913-2(lines 913 929) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L913-3(lines 913 929) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L1971(lines 1971 1975) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L853 garLoopResultBuilder]: At program point L1971-2(lines 1964 1979) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1)) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L1971-3(lines 1971 1975) no Hoare annotation was computed. [2021-08-26 08:33:06,154 INFO L853 garLoopResultBuilder]: At program point L1971-5(lines 1964 1979) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-08-26 08:33:06,154 INFO L857 garLoopResultBuilder]: For program point L1971-6(lines 1971 1975) no Hoare annotation was computed. [2021-08-26 08:33:06,155 INFO L853 garLoopResultBuilder]: At program point L1971-8(lines 1964 1979) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,155 INFO L857 garLoopResultBuilder]: For program point L1971-9(lines 1971 1975) no Hoare annotation was computed. [2021-08-26 08:33:06,155 INFO L853 garLoopResultBuilder]: At program point L1971-11(lines 1964 1979) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,155 INFO L857 garLoopResultBuilder]: For program point L1971-12(lines 1971 1975) no Hoare annotation was computed. [2021-08-26 08:33:06,155 INFO L853 garLoopResultBuilder]: At program point L1971-14(lines 1964 1979) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,155 INFO L857 garLoopResultBuilder]: For program point L1971-15(lines 1971 1975) no Hoare annotation was computed. [2021-08-26 08:33:06,155 INFO L853 garLoopResultBuilder]: At program point L1971-17(lines 1964 1979) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,155 INFO L857 garLoopResultBuilder]: For program point L1971-18(lines 1971 1975) no Hoare annotation was computed. [2021-08-26 08:33:06,155 INFO L853 garLoopResultBuilder]: At program point L1971-20(lines 1964 1979) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,155 INFO L857 garLoopResultBuilder]: For program point L1048(lines 1048 1054) no Hoare annotation was computed. [2021-08-26 08:33:06,155 INFO L857 garLoopResultBuilder]: For program point L1048-1(lines 1048 1054) no Hoare annotation was computed. [2021-08-26 08:33:06,156 INFO L857 garLoopResultBuilder]: For program point L1048-2(lines 1048 1054) no Hoare annotation was computed. [2021-08-26 08:33:06,156 INFO L857 garLoopResultBuilder]: For program point L1048-3(lines 1048 1054) no Hoare annotation was computed. [2021-08-26 08:33:06,156 INFO L857 garLoopResultBuilder]: For program point L1048-4(lines 1048 1054) no Hoare annotation was computed. [2021-08-26 08:33:06,156 INFO L857 garLoopResultBuilder]: For program point L1048-5(lines 1048 1054) no Hoare annotation was computed. [2021-08-26 08:33:06,156 INFO L857 garLoopResultBuilder]: For program point L917(lines 917 928) no Hoare annotation was computed. [2021-08-26 08:33:06,156 INFO L857 garLoopResultBuilder]: For program point L917-1(lines 917 928) no Hoare annotation was computed. [2021-08-26 08:33:06,156 INFO L857 garLoopResultBuilder]: For program point L917-2(lines 917 928) no Hoare annotation was computed. [2021-08-26 08:33:06,156 INFO L857 garLoopResultBuilder]: For program point L917-3(lines 917 928) no Hoare annotation was computed. [2021-08-26 08:33:06,156 INFO L857 garLoopResultBuilder]: For program point L655(lines 655 667) no Hoare annotation was computed. [2021-08-26 08:33:06,156 INFO L853 garLoopResultBuilder]: At program point L1053(lines 1036 1059) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)))) [2021-08-26 08:33:06,156 INFO L853 garLoopResultBuilder]: At program point L1053-1(lines 1036 1059) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,156 INFO L853 garLoopResultBuilder]: At program point L1053-2(lines 1036 1059) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-08-26 08:33:06,156 INFO L853 garLoopResultBuilder]: At program point L1053-3(lines 1036 1059) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,156 INFO L857 garLoopResultBuilder]: For program point L921(lines 921 927) no Hoare annotation was computed. [2021-08-26 08:33:06,156 INFO L853 garLoopResultBuilder]: At program point L1053-4(lines 1036 1059) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-08-26 08:33:06,156 INFO L857 garLoopResultBuilder]: For program point L921-1(lines 921 927) no Hoare annotation was computed. [2021-08-26 08:33:06,157 INFO L853 garLoopResultBuilder]: At program point L1053-5(lines 1036 1059) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-08-26 08:33:06,157 INFO L857 garLoopResultBuilder]: For program point L921-2(lines 921 927) no Hoare annotation was computed. [2021-08-26 08:33:06,157 INFO L857 garLoopResultBuilder]: For program point L921-3(lines 921 927) no Hoare annotation was computed. [2021-08-26 08:33:06,157 INFO L853 garLoopResultBuilder]: At program point L2375(lines 2362 2490) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,157 INFO L857 garLoopResultBuilder]: For program point L658(lines 658 666) no Hoare annotation was computed. [2021-08-26 08:33:06,157 INFO L857 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-08-26 08:33:06,157 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 478) no Hoare annotation was computed. [2021-08-26 08:33:06,157 INFO L857 garLoopResultBuilder]: For program point L661(lines 661 665) no Hoare annotation was computed. [2021-08-26 08:33:06,157 INFO L853 garLoopResultBuilder]: At program point L661-2(lines 651 670) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,157 INFO L853 garLoopResultBuilder]: At program point L1719(lines 1 2651) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-08-26 08:33:06,158 INFO L853 garLoopResultBuilder]: At program point L1719-1(lines 1 2651) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,158 INFO L853 garLoopResultBuilder]: At program point L1719-2(lines 1 2651) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-08-26 08:33:06,158 INFO L853 garLoopResultBuilder]: At program point L1719-3(lines 1 2651) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,158 INFO L853 garLoopResultBuilder]: At program point L1719-4(lines 1 2651) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-08-26 08:33:06,158 INFO L853 garLoopResultBuilder]: At program point L1719-5(lines 1 2651) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-08-26 08:33:06,158 INFO L857 garLoopResultBuilder]: For program point L2380(lines 2380 2384) no Hoare annotation was computed. [2021-08-26 08:33:06,158 INFO L857 garLoopResultBuilder]: For program point L1986(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,158 INFO L857 garLoopResultBuilder]: For program point L1986-1(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L1986-2(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L1986-3(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L1986-4(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L1986-5(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L1986-6(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L1986-7(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L1986-8(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L1986-9(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L1986-10(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L1986-11(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L1986-12(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L1986-13(lines 1986 1997) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L853 garLoopResultBuilder]: At program point L1855(lines 1851 1857) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,159 INFO L853 garLoopResultBuilder]: At program point L1855-1(lines 1851 1857) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L931(lines 931 972) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L931-1(lines 931 972) no Hoare annotation was computed. [2021-08-26 08:33:06,159 INFO L857 garLoopResultBuilder]: For program point L931-2(lines 931 972) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L931-3(lines 931 972) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1064(lines 1064 1076) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L932(lines 932 948) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L932-1(lines 932 948) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L932-2(lines 932 948) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L932-3(lines 932 948) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L853 garLoopResultBuilder]: At program point L2386(lines 2376 2489) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990-1(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990-2(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990-3(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990-4(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990-5(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990-6(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990-7(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990-8(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990-9(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990-10(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990-11(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,160 INFO L857 garLoopResultBuilder]: For program point L1990-12(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,161 INFO L857 garLoopResultBuilder]: For program point L1990-13(lines 1990 1996) no Hoare annotation was computed. [2021-08-26 08:33:06,161 INFO L857 garLoopResultBuilder]: For program point L1067(lines 1067 1075) no Hoare annotation was computed. [2021-08-26 08:33:06,161 INFO L857 garLoopResultBuilder]: For program point L936(lines 936 947) no Hoare annotation was computed. [2021-08-26 08:33:06,161 INFO L857 garLoopResultBuilder]: For program point L936-1(lines 936 947) no Hoare annotation was computed. [2021-08-26 08:33:06,161 INFO L857 garLoopResultBuilder]: For program point L936-2(lines 936 947) no Hoare annotation was computed. [2021-08-26 08:33:06,161 INFO L857 garLoopResultBuilder]: For program point L936-3(lines 936 947) no Hoare annotation was computed. [2021-08-26 08:33:06,161 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION(line 478) no Hoare annotation was computed. [2021-08-26 08:33:06,161 INFO L853 garLoopResultBuilder]: At program point L1597(lines 1572 1599) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,161 INFO L853 garLoopResultBuilder]: At program point L1597-1(lines 1572 1599) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,161 INFO L853 garLoopResultBuilder]: At program point L1597-2(lines 1572 1599) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,161 INFO L853 garLoopResultBuilder]: At program point L1597-3(lines 1572 1599) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,161 INFO L860 garLoopResultBuilder]: At program point L1597-4(lines 1572 1599) the Hoare annotation is: true [2021-08-26 08:33:06,161 INFO L860 garLoopResultBuilder]: At program point L1597-5(lines 1572 1599) the Hoare annotation is: true [2021-08-26 08:33:06,161 INFO L857 garLoopResultBuilder]: For program point L2391(lines 2391 2395) no Hoare annotation was computed. [2021-08-26 08:33:06,161 INFO L857 garLoopResultBuilder]: For program point L1070(lines 1070 1074) no Hoare annotation was computed. [2021-08-26 08:33:06,161 INFO L853 garLoopResultBuilder]: At program point L1070-2(lines 1 2651) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (not (= ~__ste_email_to0~0 1))) (.cse4 (= ULTIMATE.start_test_~op2~0 0)) (.cse5 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 (= ULTIMATE.start_test_~op1~0 0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 (= ULTIMATE.start_test_~op1~0 1) .cse3 .cse4 .cse5))) [2021-08-26 08:33:06,161 INFO L853 garLoopResultBuilder]: At program point L1995(lines 1982 2000) the Hoare annotation is: (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,162 INFO L853 garLoopResultBuilder]: At program point L1995-1(lines 1982 2000) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-08-26 08:33:06,162 INFO L853 garLoopResultBuilder]: At program point L1995-2(lines 1982 2000) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,162 INFO L853 garLoopResultBuilder]: At program point L1995-3(lines 1982 2000) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,162 INFO L853 garLoopResultBuilder]: At program point L1995-4(lines 1982 2000) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,162 INFO L853 garLoopResultBuilder]: At program point L1995-5(lines 1982 2000) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,162 INFO L853 garLoopResultBuilder]: At program point L1995-6(lines 1982 2000) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,162 INFO L853 garLoopResultBuilder]: At program point L1995-7(lines 1982 2000) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,162 INFO L853 garLoopResultBuilder]: At program point L1995-8(lines 1982 2000) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,163 INFO L853 garLoopResultBuilder]: At program point L1995-9(lines 1982 2000) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,163 INFO L853 garLoopResultBuilder]: At program point L1995-10(lines 1982 2000) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4))) [2021-08-26 08:33:06,163 INFO L860 garLoopResultBuilder]: At program point L1995-11(lines 1982 2000) the Hoare annotation is: true [2021-08-26 08:33:06,163 INFO L853 garLoopResultBuilder]: At program point L1995-12(lines 1982 2000) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-08-26 08:33:06,163 INFO L860 garLoopResultBuilder]: At program point L1995-13(lines 1982 2000) the Hoare annotation is: true [2021-08-26 08:33:06,163 INFO L857 garLoopResultBuilder]: For program point L940(lines 940 946) no Hoare annotation was computed. [2021-08-26 08:33:06,163 INFO L857 garLoopResultBuilder]: For program point L940-1(lines 940 946) no Hoare annotation was computed. [2021-08-26 08:33:06,164 INFO L857 garLoopResultBuilder]: For program point L940-2(lines 940 946) no Hoare annotation was computed. [2021-08-26 08:33:06,164 INFO L857 garLoopResultBuilder]: For program point L940-3(lines 940 946) no Hoare annotation was computed. [2021-08-26 08:33:06,164 INFO L853 garLoopResultBuilder]: At program point L2397(lines 2387 2488) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,164 INFO L853 garLoopResultBuilder]: At program point L1605(lines 1600 1608) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,164 INFO L853 garLoopResultBuilder]: At program point L1605-1(lines 1600 1608) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,164 INFO L853 garLoopResultBuilder]: At program point L1605-2(lines 1600 1608) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,165 INFO L853 garLoopResultBuilder]: At program point L1605-3(lines 1600 1608) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,165 INFO L853 garLoopResultBuilder]: At program point L1605-4(lines 1600 1608) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,165 INFO L853 garLoopResultBuilder]: At program point L1605-5(lines 1600 1608) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,165 INFO L853 garLoopResultBuilder]: At program point L1605-6(lines 1600 1608) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,165 INFO L853 garLoopResultBuilder]: At program point L1605-7(lines 1600 1608) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,165 INFO L853 garLoopResultBuilder]: At program point L1605-8(lines 1600 1608) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,165 INFO L860 garLoopResultBuilder]: At program point L1605-9(lines 1600 1608) the Hoare annotation is: true [2021-08-26 08:33:06,166 INFO L853 garLoopResultBuilder]: At program point L1605-10(lines 1600 1608) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,166 INFO L860 garLoopResultBuilder]: At program point L1605-11(lines 1600 1608) the Hoare annotation is: true [2021-08-26 08:33:06,166 INFO L857 garLoopResultBuilder]: For program point L1475(lines 1475 1491) no Hoare annotation was computed. [2021-08-26 08:33:06,166 INFO L857 garLoopResultBuilder]: For program point L1475-1(lines 1475 1491) no Hoare annotation was computed. [2021-08-26 08:33:06,166 INFO L857 garLoopResultBuilder]: For program point L1475-2(lines 1475 1491) no Hoare annotation was computed. [2021-08-26 08:33:06,166 INFO L857 garLoopResultBuilder]: For program point L1475-3(lines 1475 1491) no Hoare annotation was computed. [2021-08-26 08:33:06,166 INFO L857 garLoopResultBuilder]: For program point L1475-4(lines 1475 1491) no Hoare annotation was computed. [2021-08-26 08:33:06,166 INFO L857 garLoopResultBuilder]: For program point L1475-5(lines 1475 1491) no Hoare annotation was computed. [2021-08-26 08:33:06,167 INFO L857 garLoopResultBuilder]: For program point L1740(lines 1740 1746) no Hoare annotation was computed. [2021-08-26 08:33:06,167 INFO L853 garLoopResultBuilder]: At program point L1740-1(lines 1732 1749) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,167 INFO L857 garLoopResultBuilder]: For program point L1740-2(lines 1740 1746) no Hoare annotation was computed. [2021-08-26 08:33:06,167 INFO L853 garLoopResultBuilder]: At program point L1740-3(lines 1732 1749) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,167 INFO L857 garLoopResultBuilder]: For program point L1740-4(lines 1740 1746) no Hoare annotation was computed. [2021-08-26 08:33:06,167 INFO L853 garLoopResultBuilder]: At program point L1740-5(lines 1732 1749) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= 2 |ULTIMATE.start_getEmailTo_#res|)) (.cse2 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse3 (= ULTIMATE.start_setClientId_~handle 3)) (.cse4 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse5 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse6 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse7 (= 2 ULTIMATE.start_createEmail_~to)) (.cse8 (= ~bob~0 1)) (.cse9 (= ~rjh~0 2)) (.cse10 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse11 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~msg 1)) (.cse13 (= 2 ULTIMATE.start_incoming_~client))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_setEmailTo_~handle 1) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~__ste_email_to0~0 2) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13))) [2021-08-26 08:33:06,167 INFO L857 garLoopResultBuilder]: For program point L1740-6(lines 1740 1746) no Hoare annotation was computed. [2021-08-26 08:33:06,167 INFO L853 garLoopResultBuilder]: At program point L1740-7(lines 1732 1749) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,167 INFO L857 garLoopResultBuilder]: For program point L1740-8(lines 1740 1746) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L853 garLoopResultBuilder]: At program point L1740-9(lines 1732 1749) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L1740-10(lines 1740 1746) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L853 garLoopResultBuilder]: At program point L1740-11(lines 1732 1749) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-2(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-4(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-6(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-8(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-10(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-12(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-14(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-16(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2402(lines 2402 2406) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-18(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-20(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-22(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-24(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,168 INFO L857 garLoopResultBuilder]: For program point L2005-26(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,169 INFO L857 garLoopResultBuilder]: For program point L2005-28(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,169 INFO L857 garLoopResultBuilder]: For program point L2005-30(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,169 INFO L857 garLoopResultBuilder]: For program point L2005-32(lines 2005 2013) no Hoare annotation was computed. [2021-08-26 08:33:06,169 INFO L857 garLoopResultBuilder]: For program point L950(lines 950 971) no Hoare annotation was computed. [2021-08-26 08:33:06,169 INFO L857 garLoopResultBuilder]: For program point L950-1(lines 950 971) no Hoare annotation was computed. [2021-08-26 08:33:06,169 INFO L857 garLoopResultBuilder]: For program point L950-2(lines 950 971) no Hoare annotation was computed. [2021-08-26 08:33:06,169 INFO L857 garLoopResultBuilder]: For program point L950-3(lines 950 971) no Hoare annotation was computed. [2021-08-26 08:33:06,169 INFO L857 garLoopResultBuilder]: For program point L1479(lines 1479 1490) no Hoare annotation was computed. [2021-08-26 08:33:06,169 INFO L857 garLoopResultBuilder]: For program point L1479-1(lines 1479 1490) no Hoare annotation was computed. [2021-08-26 08:33:06,169 INFO L857 garLoopResultBuilder]: For program point L1479-2(lines 1479 1490) no Hoare annotation was computed. [2021-08-26 08:33:06,170 INFO L857 garLoopResultBuilder]: For program point L1479-3(lines 1479 1490) no Hoare annotation was computed. [2021-08-26 08:33:06,170 INFO L857 garLoopResultBuilder]: For program point L1479-4(lines 1479 1490) no Hoare annotation was computed. [2021-08-26 08:33:06,170 INFO L857 garLoopResultBuilder]: For program point L1479-5(lines 1479 1490) no Hoare annotation was computed. [2021-08-26 08:33:06,170 INFO L857 garLoopResultBuilder]: For program point L2008(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,170 INFO L857 garLoopResultBuilder]: For program point L951(lines 951 967) no Hoare annotation was computed. [2021-08-26 08:33:06,170 INFO L853 garLoopResultBuilder]: At program point L2008-2(lines 2001 2016) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,170 INFO L857 garLoopResultBuilder]: For program point L951-1(lines 951 967) no Hoare annotation was computed. [2021-08-26 08:33:06,170 INFO L857 garLoopResultBuilder]: For program point L2008-3(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,170 INFO L857 garLoopResultBuilder]: For program point L951-2(lines 951 967) no Hoare annotation was computed. [2021-08-26 08:33:06,170 INFO L857 garLoopResultBuilder]: For program point L951-3(lines 951 967) no Hoare annotation was computed. [2021-08-26 08:33:06,171 INFO L853 garLoopResultBuilder]: At program point L2008-5(lines 2001 2016) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse1 (= ULTIMATE.start_setClientId_~handle 3)) (.cse2 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse3 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse4 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse5 (= 2 ULTIMATE.start_createEmail_~to)) (.cse6 (= ~bob~0 1)) (.cse7 (= ~rjh~0 2)) (.cse8 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse9 (= ULTIMATE.start_outgoing_~msg 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 .cse3 (= ~__ste_email_to0~0 2) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ULTIMATE.start_setEmailTo_~handle 1) .cse6 .cse7 .cse8 .cse9))) [2021-08-26 08:33:06,171 INFO L857 garLoopResultBuilder]: For program point L2008-6(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,171 INFO L853 garLoopResultBuilder]: At program point L2008-8(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,171 INFO L857 garLoopResultBuilder]: For program point L2008-9(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,171 INFO L853 garLoopResultBuilder]: At program point L2008-11(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,171 INFO L857 garLoopResultBuilder]: For program point L2008-12(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,171 INFO L853 garLoopResultBuilder]: At program point L2008-14(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,172 INFO L857 garLoopResultBuilder]: For program point L2008-15(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,172 INFO L853 garLoopResultBuilder]: At program point L2008-17(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,172 INFO L857 garLoopResultBuilder]: For program point L2008-18(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,172 INFO L853 garLoopResultBuilder]: At program point L2008-20(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,172 INFO L857 garLoopResultBuilder]: For program point L2008-21(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,172 INFO L853 garLoopResultBuilder]: At program point L2008-23(lines 2001 2016) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= 2 |ULTIMATE.start_getEmailTo_#res|)) (.cse2 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse3 (= ULTIMATE.start_setClientId_~handle 3)) (.cse4 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse5 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse6 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse7 (= 2 ULTIMATE.start_createEmail_~to)) (.cse8 (= ~bob~0 1)) (.cse9 (= ~rjh~0 2)) (.cse10 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse11 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~msg 1)) (.cse13 (= 2 ULTIMATE.start_incoming_~client))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_setEmailTo_~handle 1) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~__ste_email_to0~0 2) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13))) [2021-08-26 08:33:06,172 INFO L857 garLoopResultBuilder]: For program point L2008-24(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,172 INFO L853 garLoopResultBuilder]: At program point L2008-26(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,172 INFO L857 garLoopResultBuilder]: For program point L2008-27(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,172 INFO L853 garLoopResultBuilder]: At program point L2008-29(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,172 INFO L857 garLoopResultBuilder]: For program point L2008-30(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,172 INFO L853 garLoopResultBuilder]: At program point L2008-32(lines 2001 2016) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,172 INFO L857 garLoopResultBuilder]: For program point L2008-33(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,172 INFO L853 garLoopResultBuilder]: At program point L2008-35(lines 2001 2016) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,173 INFO L857 garLoopResultBuilder]: For program point L2008-36(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,173 INFO L853 garLoopResultBuilder]: At program point L2008-38(lines 2001 2016) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,173 INFO L857 garLoopResultBuilder]: For program point L2008-39(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,173 INFO L853 garLoopResultBuilder]: At program point L2008-41(lines 2001 2016) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-08-26 08:33:06,173 INFO L857 garLoopResultBuilder]: For program point L2008-42(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,173 INFO L853 garLoopResultBuilder]: At program point L2008-44(lines 2001 2016) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,173 INFO L857 garLoopResultBuilder]: For program point L2008-45(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,173 INFO L853 garLoopResultBuilder]: At program point L2008-47(lines 2001 2016) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-08-26 08:33:06,174 INFO L857 garLoopResultBuilder]: For program point L2008-48(lines 2008 2012) no Hoare annotation was computed. [2021-08-26 08:33:06,174 INFO L853 garLoopResultBuilder]: At program point L2008-50(lines 2001 2016) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,174 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-08-26 08:33:06,174 INFO L857 garLoopResultBuilder]: For program point L1483(lines 1483 1489) no Hoare annotation was computed. [2021-08-26 08:33:06,174 INFO L857 garLoopResultBuilder]: For program point L1483-1(lines 1483 1489) no Hoare annotation was computed. [2021-08-26 08:33:06,174 INFO L853 garLoopResultBuilder]: At program point L2408(lines 2398 2487) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,174 INFO L857 garLoopResultBuilder]: For program point L1483-2(lines 1483 1489) no Hoare annotation was computed. [2021-08-26 08:33:06,175 INFO L857 garLoopResultBuilder]: For program point L1483-3(lines 1483 1489) no Hoare annotation was computed. [2021-08-26 08:33:06,175 INFO L857 garLoopResultBuilder]: For program point L1483-4(lines 1483 1489) no Hoare annotation was computed. [2021-08-26 08:33:06,175 INFO L857 garLoopResultBuilder]: For program point L1483-5(lines 1483 1489) no Hoare annotation was computed. [2021-08-26 08:33:06,175 INFO L857 garLoopResultBuilder]: For program point L955(lines 955 966) no Hoare annotation was computed. [2021-08-26 08:33:06,175 INFO L857 garLoopResultBuilder]: For program point L955-1(lines 955 966) no Hoare annotation was computed. [2021-08-26 08:33:06,175 INFO L857 garLoopResultBuilder]: For program point L955-2(lines 955 966) no Hoare annotation was computed. [2021-08-26 08:33:06,175 INFO L857 garLoopResultBuilder]: For program point L955-3(lines 955 966) no Hoare annotation was computed. [2021-08-26 08:33:06,175 INFO L857 garLoopResultBuilder]: For program point L959(lines 959 965) no Hoare annotation was computed. [2021-08-26 08:33:06,175 INFO L857 garLoopResultBuilder]: For program point L959-1(lines 959 965) no Hoare annotation was computed. [2021-08-26 08:33:06,176 INFO L857 garLoopResultBuilder]: For program point L959-2(lines 959 965) no Hoare annotation was computed. [2021-08-26 08:33:06,176 INFO L857 garLoopResultBuilder]: For program point L959-3(lines 959 965) no Hoare annotation was computed. [2021-08-26 08:33:06,176 INFO L853 garLoopResultBuilder]: At program point L1488(lines 1471 1494) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,176 INFO L853 garLoopResultBuilder]: At program point L1488-1(lines 1471 1494) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,176 INFO L853 garLoopResultBuilder]: At program point L1488-2(lines 1471 1494) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse10 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse11 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse8 .cse9 .cse10 .cse11 (= 2 ULTIMATE.start_incoming_~client)))) [2021-08-26 08:33:06,176 INFO L853 garLoopResultBuilder]: At program point L1488-3(lines 1471 1494) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,177 INFO L857 garLoopResultBuilder]: For program point L2413(lines 2413 2420) no Hoare annotation was computed. [2021-08-26 08:33:06,177 INFO L853 garLoopResultBuilder]: At program point L1488-4(lines 1471 1494) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) .cse2) (and .cse0 (not (= ~rjh~0 1)) .cse1 (not (= ULTIMATE.start_createEmail_~to 1)) .cse2 (= |ULTIMATE.start_getClientForwardReceiver_#res| 0)))) [2021-08-26 08:33:06,177 INFO L853 garLoopResultBuilder]: At program point L1488-5(lines 1471 1494) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (not (= ~rjh~0 1))) (.cse2 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse3 (not (= ULTIMATE.start_createEmail_~to 1))) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= |ULTIMATE.start_getClientForwardReceiver_#res| 0)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= 2 ULTIMATE.start_createEmail_~to) .cse3 (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-08-26 08:33:06,177 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 478) no Hoare annotation was computed. [2021-08-26 08:33:06,177 INFO L857 garLoopResultBuilder]: For program point L2552(lines 2552 2560) no Hoare annotation was computed. [2021-08-26 08:33:06,177 INFO L857 garLoopResultBuilder]: For program point L1760(lines 1760 1767) no Hoare annotation was computed. [2021-08-26 08:33:06,177 INFO L853 garLoopResultBuilder]: At program point L1760-1(lines 1663 1674) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,178 INFO L857 garLoopResultBuilder]: For program point L1760-2(lines 1760 1767) no Hoare annotation was computed. [2021-08-26 08:33:06,178 INFO L857 garLoopResultBuilder]: For program point L1760-4(lines 1760 1767) no Hoare annotation was computed. [2021-08-26 08:33:06,178 INFO L853 garLoopResultBuilder]: At program point L1760-5(lines 1786 1798) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,178 INFO L857 garLoopResultBuilder]: For program point L1760-6(lines 1760 1767) no Hoare annotation was computed. [2021-08-26 08:33:06,178 INFO L853 garLoopResultBuilder]: At program point L1760-7(lines 1663 1674) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,178 INFO L857 garLoopResultBuilder]: For program point L1760-8(lines 1760 1767) no Hoare annotation was computed. [2021-08-26 08:33:06,178 INFO L857 garLoopResultBuilder]: For program point L1760-10(lines 1760 1767) no Hoare annotation was computed. [2021-08-26 08:33:06,178 INFO L857 garLoopResultBuilder]: For program point L2289(lines 2289 2295) no Hoare annotation was computed. [2021-08-26 08:33:06,179 INFO L857 garLoopResultBuilder]: For program point L2289-2(lines 2289 2295) no Hoare annotation was computed. [2021-08-26 08:33:06,179 INFO L857 garLoopResultBuilder]: For program point L2289-4(lines 2289 2295) no Hoare annotation was computed. [2021-08-26 08:33:06,179 INFO L857 garLoopResultBuilder]: For program point L2289-6(lines 2289 2295) no Hoare annotation was computed. [2021-08-26 08:33:06,179 INFO L857 garLoopResultBuilder]: For program point L2289-8(lines 2289 2295) no Hoare annotation was computed. [2021-08-26 08:33:06,179 INFO L857 garLoopResultBuilder]: For program point L2289-10(lines 2289 2295) no Hoare annotation was computed. [2021-08-26 08:33:06,179 INFO L853 garLoopResultBuilder]: At program point L1629(lines 1618 1632) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,179 INFO L853 garLoopResultBuilder]: At program point L2422(lines 2409 2486) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,179 INFO L853 garLoopResultBuilder]: At program point L970(lines 908 976) the Hoare annotation is: (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,179 INFO L853 garLoopResultBuilder]: At program point L970-1(lines 908 976) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,179 INFO L853 garLoopResultBuilder]: At program point L970-2(lines 908 976) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,179 INFO L853 garLoopResultBuilder]: At program point L970-3(lines 908 976) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,179 INFO L857 garLoopResultBuilder]: For program point L1499(lines 1499 1511) no Hoare annotation was computed. [2021-08-26 08:33:06,179 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION(line 478) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L1502(lines 1502 1510) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L2427(lines 2427 2431) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L1505(lines 1505 1509) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L853 garLoopResultBuilder]: At program point L1505-2(lines 1 2651) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L847(lines 847 895) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L853 garLoopResultBuilder]: At program point L2433(lines 2423 2485) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L848(lines 848 860) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L981(lines 981 1029) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L981-1(lines 981 1029) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L982(lines 982 994) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L982-2(lines 982 994) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L851(lines 851 859) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L2438(lines 2438 2445) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L985(lines 985 993) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L985-2(lines 985 993) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L854(lines 854 858) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L1912(lines 1912 1923) no Hoare annotation was computed. [2021-08-26 08:33:06,180 INFO L857 garLoopResultBuilder]: For program point L1912-1(lines 1912 1923) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1912-2(lines 1912 1923) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1912-3(lines 1912 1923) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1912-4(lines 1912 1923) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1912-5(lines 1912 1923) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L988(lines 988 992) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L988-3(lines 988 992) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1916(lines 1916 1922) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1916-1(lines 1916 1922) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1916-2(lines 1916 1922) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1916-3(lines 1916 1922) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1916-4(lines 1916 1922) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1916-5(lines 1916 1922) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1522(lines 1522 1538) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1522-1(lines 1522 1538) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1522-2(lines 1522 1538) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1522-3(lines 1522 1538) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L853 garLoopResultBuilder]: At program point L2447(lines 2434 2484) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1522-4(lines 1522 1538) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L1522-5(lines 1522 1538) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L862(lines 862 894) no Hoare annotation was computed. [2021-08-26 08:33:06,181 INFO L857 garLoopResultBuilder]: For program point L863(lines 863 875) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L996(lines 996 1028) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L996-1(lines 996 1028) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L853 garLoopResultBuilder]: At program point L1921(lines 1908 1926) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,182 INFO L853 garLoopResultBuilder]: At program point L1921-1(lines 1908 1926) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,182 INFO L853 garLoopResultBuilder]: At program point L1921-2(lines 1908 1926) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,182 INFO L853 garLoopResultBuilder]: At program point L1921-3(lines 1908 1926) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,182 INFO L860 garLoopResultBuilder]: At program point L1921-4(lines 1908 1926) the Hoare annotation is: true [2021-08-26 08:33:06,182 INFO L860 garLoopResultBuilder]: At program point L1921-5(lines 1908 1926) the Hoare annotation is: true [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L997(lines 997 1009) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L997-2(lines 997 1009) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L1526(lines 1526 1537) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L1526-1(lines 1526 1537) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L1526-2(lines 1526 1537) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L1526-3(lines 1526 1537) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L1526-4(lines 1526 1537) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L1526-5(lines 1526 1537) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L866(lines 866 874) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L2452(lines 2452 2456) no Hoare annotation was computed. [2021-08-26 08:33:06,182 INFO L857 garLoopResultBuilder]: For program point L1000(lines 1000 1008) no Hoare annotation was computed. [2021-08-26 08:33:06,183 INFO L857 garLoopResultBuilder]: For program point L1000-2(lines 1000 1008) no Hoare annotation was computed. [2021-08-26 08:33:06,183 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 478) no Hoare annotation was computed. [2021-08-26 08:33:06,183 INFO L857 garLoopResultBuilder]: For program point L869(lines 869 873) no Hoare annotation was computed. [2021-08-26 08:33:06,183 INFO L857 garLoopResultBuilder]: For program point L1530(lines 1530 1536) no Hoare annotation was computed. [2021-08-26 08:33:06,183 INFO L857 garLoopResultBuilder]: For program point L1530-1(lines 1530 1536) no Hoare annotation was computed. [2021-08-26 08:33:06,183 INFO L857 garLoopResultBuilder]: For program point L1530-2(lines 1530 1536) no Hoare annotation was computed. [2021-08-26 08:33:06,183 INFO L857 garLoopResultBuilder]: For program point L1530-3(lines 1530 1536) no Hoare annotation was computed. [2021-08-26 08:33:06,183 INFO L857 garLoopResultBuilder]: For program point L1530-4(lines 1530 1536) no Hoare annotation was computed. [2021-08-26 08:33:06,183 INFO L857 garLoopResultBuilder]: For program point L1530-5(lines 1530 1536) no Hoare annotation was computed. [2021-08-26 08:33:06,183 INFO L853 garLoopResultBuilder]: At program point L77(lines 1 2651) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-08-26 08:33:06,183 INFO L857 garLoopResultBuilder]: For program point L1003(lines 1003 1007) no Hoare annotation was computed. [2021-08-26 08:33:06,183 INFO L857 garLoopResultBuilder]: For program point L1003-3(lines 1003 1007) no Hoare annotation was computed. [2021-08-26 08:33:06,183 INFO L853 garLoopResultBuilder]: At program point L2458(lines 2448 2483) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,183 INFO L853 garLoopResultBuilder]: At program point L1535(lines 1518 1541) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-08-26 08:33:06,183 INFO L857 garLoopResultBuilder]: For program point L478(line 478) no Hoare annotation was computed. [2021-08-26 08:33:06,184 INFO L853 garLoopResultBuilder]: At program point L1535-1(lines 1518 1541) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,184 INFO L857 garLoopResultBuilder]: For program point L478-1(line 478) no Hoare annotation was computed. [2021-08-26 08:33:06,184 INFO L853 garLoopResultBuilder]: At program point L1535-2(lines 1518 1541) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,184 INFO L857 garLoopResultBuilder]: For program point L478-2(line 478) no Hoare annotation was computed. [2021-08-26 08:33:06,184 INFO L853 garLoopResultBuilder]: At program point L1535-3(lines 1518 1541) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,184 INFO L857 garLoopResultBuilder]: For program point L478-3(line 478) no Hoare annotation was computed. [2021-08-26 08:33:06,184 INFO L853 garLoopResultBuilder]: At program point L1535-4(lines 1518 1541) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,184 INFO L857 garLoopResultBuilder]: For program point L478-4(line 478) no Hoare annotation was computed. [2021-08-26 08:33:06,184 INFO L853 garLoopResultBuilder]: At program point L1535-5(lines 1518 1541) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-08-26 08:33:06,184 INFO L857 garLoopResultBuilder]: For program point L478-5(line 478) no Hoare annotation was computed. [2021-08-26 08:33:06,184 INFO L853 garLoopResultBuilder]: At program point L479(lines 2281 2298) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,184 INFO L853 garLoopResultBuilder]: At program point L479-1(lines 2281 2298) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,184 INFO L853 garLoopResultBuilder]: At program point L479-2(lines 2281 2298) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,184 INFO L853 garLoopResultBuilder]: At program point L479-3(lines 2281 2298) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-08-26 08:33:06,184 INFO L860 garLoopResultBuilder]: At program point L479-4(lines 2281 2298) the Hoare annotation is: true [2021-08-26 08:33:06,184 INFO L860 garLoopResultBuilder]: At program point L479-5(lines 2281 2298) the Hoare annotation is: true [2021-08-26 08:33:06,184 INFO L857 garLoopResultBuilder]: For program point L877(lines 877 893) no Hoare annotation was computed. [2021-08-26 08:33:06,185 INFO L853 garLoopResultBuilder]: At program point L877-1(lines 843 898) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,185 INFO L853 garLoopResultBuilder]: At program point L2595(lines 2575 2597) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-08-26 08:33:06,185 INFO L857 garLoopResultBuilder]: For program point L2463(lines 2463 2467) no Hoare annotation was computed. [2021-08-26 08:33:06,185 INFO L853 garLoopResultBuilder]: At program point L85(lines 80 88) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-08-26 08:33:06,185 INFO L857 garLoopResultBuilder]: For program point L878(lines 878 890) no Hoare annotation was computed. [2021-08-26 08:33:06,185 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-08-26 08:33:06,185 INFO L857 garLoopResultBuilder]: For program point L1011(lines 1011 1027) no Hoare annotation was computed. [2021-08-26 08:33:06,185 INFO L853 garLoopResultBuilder]: At program point L1011-1(lines 977 1032) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,185 INFO L857 garLoopResultBuilder]: For program point L1011-2(lines 1011 1027) no Hoare annotation was computed. [2021-08-26 08:33:06,185 INFO L853 garLoopResultBuilder]: At program point L1011-3(lines 1 2651) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,185 INFO L857 garLoopResultBuilder]: For program point L1012(lines 1012 1024) no Hoare annotation was computed. [2021-08-26 08:33:06,185 INFO L857 garLoopResultBuilder]: For program point L1012-2(lines 1012 1024) no Hoare annotation was computed. [2021-08-26 08:33:06,185 INFO L857 garLoopResultBuilder]: For program point L881(lines 881 889) no Hoare annotation was computed. [2021-08-26 08:33:06,185 INFO L857 garLoopResultBuilder]: For program point L1015(lines 1015 1023) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L857 garLoopResultBuilder]: For program point L1015-2(lines 1015 1023) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L853 garLoopResultBuilder]: At program point L2469(lines 2459 2482) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,186 INFO L857 garLoopResultBuilder]: For program point L884(lines 884 888) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L857 garLoopResultBuilder]: For program point L1546(lines 1546 1558) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L857 garLoopResultBuilder]: For program point L1546-2(lines 1546 1558) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L857 garLoopResultBuilder]: For program point L1546-4(lines 1546 1558) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L857 garLoopResultBuilder]: For program point L1018(lines 1018 1022) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L857 garLoopResultBuilder]: For program point L1018-3(lines 1018 1022) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L857 garLoopResultBuilder]: For program point L1549(lines 1549 1557) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L857 garLoopResultBuilder]: For program point L1549-2(lines 1549 1557) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L857 garLoopResultBuilder]: For program point L2474(lines 2474 2478) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L857 garLoopResultBuilder]: For program point L1549-4(lines 1549 1557) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L853 garLoopResultBuilder]: At program point L2474-1(lines 2343 2492) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-08-26 08:33:06,186 INFO L853 garLoopResultBuilder]: At program point L1814(lines 1809 1817) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-08-26 08:33:06,186 INFO L857 garLoopResultBuilder]: For program point L2608(lines 2608 2615) no Hoare annotation was computed. [2021-08-26 08:33:06,186 INFO L860 garLoopResultBuilder]: At program point L2608-1(lines 2608 2615) the Hoare annotation is: true [2021-08-26 08:33:06,187 INFO L857 garLoopResultBuilder]: For program point L2344(lines 2343 2492) no Hoare annotation was computed. [2021-08-26 08:33:06,187 INFO L857 garLoopResultBuilder]: For program point L1552(lines 1552 1556) no Hoare annotation was computed. [2021-08-26 08:33:06,187 INFO L853 garLoopResultBuilder]: At program point L1552-2(lines 1 2651) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-08-26 08:33:06,187 INFO L857 garLoopResultBuilder]: For program point L1552-3(lines 1552 1556) no Hoare annotation was computed. [2021-08-26 08:33:06,187 INFO L853 garLoopResultBuilder]: At program point L1552-5(lines 1 2651) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1)) (= ULTIMATE.start_setClientId_~handle 2)) [2021-08-26 08:33:06,187 INFO L857 garLoopResultBuilder]: For program point L1552-6(lines 1552 1556) no Hoare annotation was computed. [2021-08-26 08:33:06,187 INFO L853 garLoopResultBuilder]: At program point L1552-8(lines 1 2651) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-08-26 08:33:06,188 INFO L857 garLoopResultBuilder]: For program point L2345(lines 2345 2349) no Hoare annotation was computed. [2021-08-26 08:33:06,188 INFO L857 garLoopResultBuilder]: For program point L1949(lines 1949 1960) no Hoare annotation was computed. [2021-08-26 08:33:06,188 INFO L857 garLoopResultBuilder]: For program point L1949-1(lines 1949 1960) no Hoare annotation was computed. [2021-08-26 08:33:06,188 INFO L857 garLoopResultBuilder]: For program point L1949-2(lines 1949 1960) no Hoare annotation was computed. [2021-08-26 08:33:06,188 INFO L857 garLoopResultBuilder]: For program point L1949-3(lines 1949 1960) no Hoare annotation was computed. [2021-08-26 08:33:06,188 INFO L857 garLoopResultBuilder]: For program point L1949-4(lines 1949 1960) no Hoare annotation was computed. [2021-08-26 08:33:06,188 INFO L857 garLoopResultBuilder]: For program point L1949-5(lines 1949 1960) no Hoare annotation was computed. [2021-08-26 08:33:06,188 INFO L857 garLoopResultBuilder]: For program point L1949-6(lines 1949 1960) no Hoare annotation was computed. [2021-08-26 08:33:06,189 INFO L857 garLoopResultBuilder]: For program point L1949-7(lines 1949 1960) no Hoare annotation was computed. [2021-08-26 08:33:06,189 INFO L857 garLoopResultBuilder]: For program point L1949-8(lines 1949 1960) no Hoare annotation was computed. [2021-08-26 08:33:06,189 INFO L857 garLoopResultBuilder]: For program point L1949-9(lines 1949 1960) no Hoare annotation was computed. [2021-08-26 08:33:06,189 INFO L857 garLoopResultBuilder]: For program point L1949-10(lines 1949 1960) no Hoare annotation was computed. [2021-08-26 08:33:06,189 INFO L857 garLoopResultBuilder]: For program point L1949-11(lines 1949 1960) no Hoare annotation was computed. [2021-08-26 08:33:06,193 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-08-26 08:33:06,244 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 26.08 08:33:06 BoogieIcfgContainer [2021-08-26 08:33:06,247 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-08-26 08:33:06,248 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-08-26 08:33:06,248 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-08-26 08:33:06,248 INFO L275 PluginConnector]: Witness Printer initialized [2021-08-26 08:33:06,249 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.08 08:31:44" (3/4) ... [2021-08-26 08:33:06,251 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-08-26 08:33:06,291 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 208 nodes and edges [2021-08-26 08:33:06,300 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 114 nodes and edges [2021-08-26 08:33:06,303 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-08-26 08:33:06,306 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2021-08-26 08:33:06,309 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-08-26 08:33:06,313 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-08-26 08:33:06,349 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,349 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-08-26 08:33:06,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-08-26 08:33:06,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-08-26 08:33:06,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || ((((((((((sender == 1 && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-08-26 08:33:06,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-08-26 08:33:06,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-08-26 08:33:06,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-08-26 08:33:06,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-08-26 08:33:06,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-08-26 08:33:06,352 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) || (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && 2 == handle) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-08-26 08:33:06,352 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-08-26 08:33:06,352 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,352 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-08-26 08:33:06,352 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-08-26 08:33:06,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-08-26 08:33:06,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-08-26 08:33:06,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) [2021-08-26 08:33:06,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-08-26 08:33:06,354 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,354 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,354 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,354 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,354 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,354 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) [2021-08-26 08:33:06,355 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,355 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,355 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,355 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,355 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,355 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,356 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,356 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,356 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,356 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-08-26 08:33:06,356 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,356 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,357 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,357 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-08-26 08:33:06,357 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,357 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,357 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,358 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-08-26 08:33:06,358 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,358 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,358 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,358 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,358 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,359 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,359 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,359 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) || ((((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) [2021-08-26 08:33:06,359 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,360 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,360 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-08-26 08:33:06,360 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,360 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,360 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-08-26 08:33:06,360 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,361 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) || (((((((((sender == 1 && handle == 3) && !(rjh == 1)) && \result == 1) && 2 == to) && !(to == 1)) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-08-26 08:33:06,361 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,361 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,361 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,362 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-08-26 08:33:06,362 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,362 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-08-26 08:33:06,362 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,362 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,363 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-08-26 08:33:06,363 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,363 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,363 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,363 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-08-26 08:33:06,364 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-08-26 08:33:06,364 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,364 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,364 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,364 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,364 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,365 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,365 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,365 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,365 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,366 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,366 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,366 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,366 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,366 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,367 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,367 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,367 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,367 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) [2021-08-26 08:33:06,367 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,368 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,368 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,368 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-08-26 08:33:06,368 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,368 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-08-26 08:33:06,368 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-08-26 08:33:06,369 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,369 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) [2021-08-26 08:33:06,369 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-08-26 08:33:06,369 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-08-26 08:33:06,369 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,369 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-08-26 08:33:06,370 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-08-26 08:33:06,495 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-08-26 08:33:06,495 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-08-26 08:33:06,497 INFO L168 Benchmark]: Toolchain (without parser) took 85715.85 ms. Allocated memory was 58.7 MB in the beginning and 1.5 GB in the end (delta: 1.5 GB). Free memory was 35.2 MB in the beginning and 865.8 MB in the end (delta: -830.6 MB). Peak memory consumption was 632.6 MB. Max. memory is 16.1 GB. [2021-08-26 08:33:06,497 INFO L168 Benchmark]: CDTParser took 0.19 ms. Allocated memory is still 58.7 MB. Free memory was 41.1 MB in the beginning and 41.0 MB in the end (delta: 42.6 kB). There was no memory consumed. Max. memory is 16.1 GB. [2021-08-26 08:33:06,498 INFO L168 Benchmark]: CACSL2BoogieTranslator took 765.26 ms. Allocated memory was 58.7 MB in the beginning and 79.7 MB in the end (delta: 21.0 MB). Free memory was 35.1 MB in the beginning and 56.0 MB in the end (delta: -20.9 MB). Peak memory consumption was 18.7 MB. Max. memory is 16.1 GB. [2021-08-26 08:33:06,498 INFO L168 Benchmark]: Boogie Procedure Inliner took 133.34 ms. Allocated memory is still 79.7 MB. Free memory was 56.0 MB in the beginning and 45.0 MB in the end (delta: 11.0 MB). Peak memory consumption was 10.5 MB. Max. memory is 16.1 GB. [2021-08-26 08:33:06,498 INFO L168 Benchmark]: Boogie Preprocessor took 148.72 ms. Allocated memory is still 79.7 MB. Free memory was 45.0 MB in the beginning and 52.0 MB in the end (delta: -7.0 MB). Peak memory consumption was 14.8 MB. Max. memory is 16.1 GB. [2021-08-26 08:33:06,499 INFO L168 Benchmark]: RCFGBuilder took 2214.90 ms. Allocated memory was 79.7 MB in the beginning and 144.7 MB in the end (delta: 65.0 MB). Free memory was 51.7 MB in the beginning and 78.3 MB in the end (delta: -26.6 MB). Peak memory consumption was 52.2 MB. Max. memory is 16.1 GB. [2021-08-26 08:33:06,499 INFO L168 Benchmark]: TraceAbstraction took 82195.73 ms. Allocated memory was 144.7 MB in the beginning and 1.5 GB in the end (delta: 1.4 GB). Free memory was 78.3 MB in the beginning and 911.4 MB in the end (delta: -833.1 MB). Peak memory consumption was 913.9 MB. Max. memory is 16.1 GB. [2021-08-26 08:33:06,499 INFO L168 Benchmark]: Witness Printer took 247.35 ms. Allocated memory is still 1.5 GB. Free memory was 911.4 MB in the beginning and 865.8 MB in the end (delta: 45.6 MB). Peak memory consumption was 44.0 MB. Max. memory is 16.1 GB. [2021-08-26 08:33:06,501 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19 ms. Allocated memory is still 58.7 MB. Free memory was 41.1 MB in the beginning and 41.0 MB in the end (delta: 42.6 kB). There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 765.26 ms. Allocated memory was 58.7 MB in the beginning and 79.7 MB in the end (delta: 21.0 MB). Free memory was 35.1 MB in the beginning and 56.0 MB in the end (delta: -20.9 MB). Peak memory consumption was 18.7 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 133.34 ms. Allocated memory is still 79.7 MB. Free memory was 56.0 MB in the beginning and 45.0 MB in the end (delta: 11.0 MB). Peak memory consumption was 10.5 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 148.72 ms. Allocated memory is still 79.7 MB. Free memory was 45.0 MB in the beginning and 52.0 MB in the end (delta: -7.0 MB). Peak memory consumption was 14.8 MB. Max. memory is 16.1 GB. * RCFGBuilder took 2214.90 ms. Allocated memory was 79.7 MB in the beginning and 144.7 MB in the end (delta: 65.0 MB). Free memory was 51.7 MB in the beginning and 78.3 MB in the end (delta: -26.6 MB). Peak memory consumption was 52.2 MB. Max. memory is 16.1 GB. * TraceAbstraction took 82195.73 ms. Allocated memory was 144.7 MB in the beginning and 1.5 GB in the end (delta: 1.4 GB). Free memory was 78.3 MB in the beginning and 911.4 MB in the end (delta: -833.1 MB). Peak memory consumption was 913.9 MB. Max. memory is 16.1 GB. * Witness Printer took 247.35 ms. Allocated memory is still 1.5 GB. Free memory was 911.4 MB in the beginning and 865.8 MB in the end (delta: 45.6 MB). Peak memory consumption was 44.0 MB. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0ms ErrorAutomatonConstructionTimeTotal, 0.0ms FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0ms ErrorAutomatonConstructionTimeAvg, 0.0ms ErrorAutomatonDifferenceTimeAvg, 0.0ms ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 478]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 478]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 478]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 478]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 478]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 478]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 477 locations, 6 error locations. Started 1 CEGAR loops. OverallTime: 82096.4ms, OverallIterations: 21, TraceHistogramMax: 3, EmptinessCheckTime: 75.9ms, AutomataDifference: 9794.9ms, DeadEndRemovalTime: 0.0ms, HoareAnnotationTime: 67054.6ms, InitialAbstractionConstructionTime: 14.6ms, PartialOrderReductionTime: 0.0ms, HoareTripleCheckerStatistics: 22811 SDtfs, 35759 SDslu, 46310 SDs, 0 SdLazy, 3484 SolverSat, 381 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 3706.9ms Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 236 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 146 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 628 ImplicationChecksByTransitivity, 1583.5ms Time, 0.0ms BasicInterpolantAutomatonTime, BiggestAbstraction: size=10744occurred in iteration=20, InterpolantAutomatonStates: 155, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0ms DumpTime, AutomataMinimizationStatistics: 2221.8ms AutomataMinimizationTime, 21 MinimizatonAttempts, 17689 StatesRemovedByMinimization, 19 NontrivialMinimizations, HoareAnnotationStatistics: 0.0ms HoareAnnotationTime, 151 LocationsWithAnnotation, 151 PreInvPairs, 3090 NumberOfFragments, 5966 HoareAnnotationTreeSize, 151 FomulaSimplifications, 6277953389 FormulaSimplificationTreeSizeReduction, 14004.7ms HoareSimplificationTime, 151 FomulaSimplificationsInter, 10700861 FormulaSimplificationTreeSizeReductionInter, 52978.4ms HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 215.4ms SsaConstructionTime, 500.7ms SatisfiabilityAnalysisTime, 1439.5ms InterpolantComputationTime, 1260 NumberOfCodeBlocks, 1260 NumberOfCodeBlocksAsserted, 22 NumberOfCheckSat, 1238 ConstructedInterpolants, 0 QuantifiedInterpolants, 2082 SizeOfPredicates, 0 NumberOfNonLiveVariables, 802 ConjunctsInSsa, 3 ConjunctsInUnsatCore, 22 InterpolantComputations, 20 PerfectInterpolantSequences, 129/133 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 6 specifications checked. All of them hold - InvariantResult [Line: 1827]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2343]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2342]: Loop Invariant Derived loop invariant: ((handle == 3 && bob == 1) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) - InvariantResult [Line: 1851]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1809]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2281]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1732]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1036]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1036]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 651]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 2387]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2281]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1663]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 80]: Loop Invariant Derived loop invariant: ((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && bob == 1) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1818]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 2598]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1908]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2398]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1471]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) || (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && 2 == handle) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1471]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1036]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 2409]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2459]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2448]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((__ste_ClientAddressBook_size0 == 0 && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1)) && handle == 2 - InvariantResult [Line: 2281]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2281]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1786]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2575]: Loop Invariant Derived loop invariant: ((((handle == 3 && __ste_ClientAddressBook_size0 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1036]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1471]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 2423]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1732]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0) && !(handle == 1)) || ((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) && !(handle == 1)) - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || ((((((((((sender == 1 && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1732]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1663]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1036]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1732]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 2281]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2434]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1908]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((handle == 3 && __ste_ClientAddressBook_size0 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 627]: Loop Invariant Derived loop invariant: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2351]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1732]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 2362]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2376]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1908]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 627]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1732]: Loop Invariant Derived loop invariant: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1471]: Loop Invariant Derived loop invariant: (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) || (((((((((sender == 1 && handle == 3) && !(rjh == 1)) && \result == 1) && 2 == to) && !(to == 1)) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1908]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2608]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1471]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1471]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2281]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1908]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1618]: Loop Invariant Derived loop invariant: ((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1851]: Loop Invariant Derived loop invariant: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1036]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 1908]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 843]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && 2 == to) && bob == 1) && rjh == 2) && !(__ste_email_to0 == 1)) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) || ((((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) RESULT: Ultimate proved your program to be correct! [2021-08-26 08:33:06,611 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...