./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-regression/rule60_list2_true-termination.c_false-unreach-call_1.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-regression/rule60_list2_true-termination.c_false-unreach-call_1.i -s /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f18f7f1f917468e24f0e5d26966f1156107884dd ..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 03:23:38,511 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 03:23:38,512 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 03:23:38,519 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 03:23:38,519 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 03:23:38,519 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 03:23:38,520 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 03:23:38,521 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 03:23:38,521 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 03:23:38,522 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 03:23:38,522 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 03:23:38,522 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 03:23:38,523 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 03:23:38,523 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 03:23:38,524 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 03:23:38,524 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 03:23:38,525 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 03:23:38,526 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 03:23:38,527 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 03:23:38,528 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 03:23:38,529 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 03:23:38,529 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 03:23:38,531 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 03:23:38,531 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 03:23:38,531 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 03:23:38,532 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 03:23:38,533 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 03:23:38,533 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 03:23:38,533 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 03:23:38,534 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 03:23:38,534 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 03:23:38,534 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 03:23:38,534 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 03:23:38,535 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 03:23:38,535 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 03:23:38,535 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 03:23:38,535 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2018-11-23 03:23:38,542 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 03:23:38,543 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 03:23:38,543 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 03:23:38,543 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 03:23:38,543 INFO L133 SettingsManager]: * User list type=DISABLED [2018-11-23 03:23:38,544 INFO L131 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2018-11-23 03:23:38,544 INFO L133 SettingsManager]: * Explicit value domain=true [2018-11-23 03:23:38,544 INFO L133 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2018-11-23 03:23:38,544 INFO L133 SettingsManager]: * Octagon Domain=false [2018-11-23 03:23:38,544 INFO L133 SettingsManager]: * Abstract domain=CompoundDomain [2018-11-23 03:23:38,544 INFO L133 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2018-11-23 03:23:38,544 INFO L133 SettingsManager]: * Use the RCFG-of-the-future interface=true [2018-11-23 03:23:38,545 INFO L133 SettingsManager]: * Interval Domain=false [2018-11-23 03:23:38,545 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 03:23:38,545 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 03:23:38,545 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 03:23:38,545 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 03:23:38,546 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 03:23:38,546 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 03:23:38,546 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 03:23:38,546 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 03:23:38,546 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 03:23:38,546 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 03:23:38,546 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 03:23:38,547 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 03:23:38,547 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 03:23:38,547 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 03:23:38,547 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 03:23:38,547 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 03:23:38,547 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 03:23:38,547 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 03:23:38,547 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 03:23:38,548 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 03:23:38,548 INFO L133 SettingsManager]: * Trace refinement strategy=TAIPAN [2018-11-23 03:23:38,548 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 03:23:38,548 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 03:23:38,548 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 03:23:38,548 INFO L133 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f18f7f1f917468e24f0e5d26966f1156107884dd [2018-11-23 03:23:38,571 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 03:23:38,581 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 03:23:38,583 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 03:23:38,584 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 03:23:38,584 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 03:23:38,585 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/../../sv-benchmarks/c/ldv-regression/rule60_list2_true-termination.c_false-unreach-call_1.i [2018-11-23 03:23:38,628 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/data/b998dad68/4f17428a2a6b40e5a79e900d0674b5cd/FLAG47a874e56 [2018-11-23 03:23:39,063 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 03:23:39,063 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/sv-benchmarks/c/ldv-regression/rule60_list2_true-termination.c_false-unreach-call_1.i [2018-11-23 03:23:39,069 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/data/b998dad68/4f17428a2a6b40e5a79e900d0674b5cd/FLAG47a874e56 [2018-11-23 03:23:39,077 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/data/b998dad68/4f17428a2a6b40e5a79e900d0674b5cd [2018-11-23 03:23:39,079 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 03:23:39,080 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 03:23:39,080 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 03:23:39,080 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 03:23:39,084 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 03:23:39,084 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:23:39" (1/1) ... [2018-11-23 03:23:39,086 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2b7a479e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39, skipping insertion in model container [2018-11-23 03:23:39,086 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:23:39" (1/1) ... [2018-11-23 03:23:39,095 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 03:23:39,123 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 03:23:39,307 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 03:23:39,310 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 03:23:39,334 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 03:23:39,415 INFO L195 MainTranslator]: Completed translation [2018-11-23 03:23:39,416 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39 WrapperNode [2018-11-23 03:23:39,416 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 03:23:39,417 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 03:23:39,417 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 03:23:39,417 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 03:23:39,424 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39" (1/1) ... [2018-11-23 03:23:39,436 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39" (1/1) ... [2018-11-23 03:23:39,442 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 03:23:39,443 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 03:23:39,443 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 03:23:39,443 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 03:23:39,450 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39" (1/1) ... [2018-11-23 03:23:39,450 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39" (1/1) ... [2018-11-23 03:23:39,452 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39" (1/1) ... [2018-11-23 03:23:39,452 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39" (1/1) ... [2018-11-23 03:23:39,458 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39" (1/1) ... [2018-11-23 03:23:39,459 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39" (1/1) ... [2018-11-23 03:23:39,460 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39" (1/1) ... [2018-11-23 03:23:39,462 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 03:23:39,462 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 03:23:39,462 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 03:23:39,462 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 03:23:39,463 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 03:23:39,504 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 03:23:39,504 INFO L130 BoogieDeclarations]: Found specification of procedure my_malloc [2018-11-23 03:23:39,504 INFO L138 BoogieDeclarations]: Found implementation of procedure my_malloc [2018-11-23 03:23:39,504 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 03:23:39,505 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 03:23:39,505 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 03:23:39,505 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 03:23:39,505 INFO L130 BoogieDeclarations]: Found specification of procedure list_add [2018-11-23 03:23:39,505 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add [2018-11-23 03:23:39,505 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 03:23:39,505 INFO L130 BoogieDeclarations]: Found specification of procedure __blast_assert [2018-11-23 03:23:39,505 INFO L138 BoogieDeclarations]: Found implementation of procedure __blast_assert [2018-11-23 03:23:39,505 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2018-11-23 03:23:39,505 INFO L138 BoogieDeclarations]: Found implementation of procedure list_del [2018-11-23 03:23:39,505 INFO L130 BoogieDeclarations]: Found specification of procedure __getMemory [2018-11-23 03:23:39,505 INFO L138 BoogieDeclarations]: Found implementation of procedure __getMemory [2018-11-23 03:23:39,506 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 03:23:39,506 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 03:23:39,725 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 03:23:39,725 INFO L280 CfgBuilder]: Removed 0 assue(true) statements. [2018-11-23 03:23:39,725 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:23:39 BoogieIcfgContainer [2018-11-23 03:23:39,725 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 03:23:39,726 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 03:23:39,726 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 03:23:39,728 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 03:23:39,728 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:23:39" (1/3) ... [2018-11-23 03:23:39,729 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@390b98bb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:23:39, skipping insertion in model container [2018-11-23 03:23:39,729 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:23:39" (2/3) ... [2018-11-23 03:23:39,729 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@390b98bb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:23:39, skipping insertion in model container [2018-11-23 03:23:39,729 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:23:39" (3/3) ... [2018-11-23 03:23:39,731 INFO L112 eAbstractionObserver]: Analyzing ICFG rule60_list2_true-termination.c_false-unreach-call_1.i [2018-11-23 03:23:39,737 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 03:23:39,743 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 03:23:39,753 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 03:23:39,775 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 03:23:39,776 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 03:23:39,776 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 03:23:39,776 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 03:23:39,776 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 03:23:39,776 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 03:23:39,776 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 03:23:39,776 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 03:23:39,788 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states. [2018-11-23 03:23:39,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2018-11-23 03:23:39,792 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 03:23:39,793 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 03:23:39,794 INFO L423 AbstractCegarLoop]: === Iteration 1 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 03:23:39,799 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:39,799 INFO L82 PathProgramCache]: Analyzing trace with hash -695557442, now seen corresponding path program 1 times [2018-11-23 03:23:39,801 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 03:23:39,841 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:39,842 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:39,842 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:39,842 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 03:23:39,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:39,973 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 03:23:39,975 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 03:23:39,975 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 03:23:39,975 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 03:23:39,978 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 03:23:39,985 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 03:23:39,986 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 03:23:39,987 INFO L87 Difference]: Start difference. First operand 48 states. Second operand 6 states. [2018-11-23 03:23:40,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 03:23:40,087 INFO L93 Difference]: Finished difference Result 86 states and 112 transitions. [2018-11-23 03:23:40,088 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 03:23:40,089 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 13 [2018-11-23 03:23:40,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 03:23:40,097 INFO L225 Difference]: With dead ends: 86 [2018-11-23 03:23:40,097 INFO L226 Difference]: Without dead ends: 40 [2018-11-23 03:23:40,100 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2018-11-23 03:23:40,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2018-11-23 03:23:40,131 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 40. [2018-11-23 03:23:40,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 40 states. [2018-11-23 03:23:40,133 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 46 transitions. [2018-11-23 03:23:40,134 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 46 transitions. Word has length 13 [2018-11-23 03:23:40,135 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 03:23:40,135 INFO L480 AbstractCegarLoop]: Abstraction has 40 states and 46 transitions. [2018-11-23 03:23:40,135 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 03:23:40,135 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 46 transitions. [2018-11-23 03:23:40,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2018-11-23 03:23:40,136 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 03:23:40,137 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 03:23:40,137 INFO L423 AbstractCegarLoop]: === Iteration 2 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 03:23:40,137 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:40,137 INFO L82 PathProgramCache]: Analyzing trace with hash -314025953, now seen corresponding path program 1 times [2018-11-23 03:23:40,137 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 03:23:40,139 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:40,139 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:40,139 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:40,139 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 03:23:40,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:40,239 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 03:23:40,240 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 03:23:40,240 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 03:23:40,240 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 03:23:40,241 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 03:23:40,241 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 03:23:40,241 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 03:23:40,242 INFO L87 Difference]: Start difference. First operand 40 states and 46 transitions. Second operand 7 states. [2018-11-23 03:23:40,259 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 03:23:40,259 INFO L93 Difference]: Finished difference Result 65 states and 76 transitions. [2018-11-23 03:23:40,260 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 03:23:40,260 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 38 [2018-11-23 03:23:40,260 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 03:23:40,261 INFO L225 Difference]: With dead ends: 65 [2018-11-23 03:23:40,261 INFO L226 Difference]: Without dead ends: 45 [2018-11-23 03:23:40,262 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 03:23:40,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2018-11-23 03:23:40,268 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2018-11-23 03:23:40,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 45 states. [2018-11-23 03:23:40,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 51 transitions. [2018-11-23 03:23:40,269 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 51 transitions. Word has length 38 [2018-11-23 03:23:40,269 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 03:23:40,270 INFO L480 AbstractCegarLoop]: Abstraction has 45 states and 51 transitions. [2018-11-23 03:23:40,270 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-23 03:23:40,270 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 51 transitions. [2018-11-23 03:23:40,270 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2018-11-23 03:23:40,270 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 03:23:40,270 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 03:23:40,270 INFO L423 AbstractCegarLoop]: === Iteration 3 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 03:23:40,271 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:40,271 INFO L82 PathProgramCache]: Analyzing trace with hash -607428960, now seen corresponding path program 1 times [2018-11-23 03:23:40,271 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 03:23:40,272 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:40,272 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:40,272 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:40,272 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 03:23:40,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:40,348 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 03:23:40,349 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 03:23:40,349 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 03:23:40,350 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 39 with the following transitions: [2018-11-23 03:23:40,351 INFO L202 CegarAbsIntRunner]: [0], [2], [3], [4], [5], [14], [19], [30], [36], [38], [40], [43], [54], [57], [62], [65], [66], [67], [68], [69], [70], [72], [73], [74], [76], [77], [78], [79], [80] [2018-11-23 03:23:40,374 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 03:23:40,374 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 03:23:40,560 INFO L266 AbstractInterpreter]: Error location(s) were unreachable [2018-11-23 03:23:40,561 INFO L272 AbstractInterpreter]: Visited 27 different actions 73 times. Merged at 9 different actions 23 times. Never widened. Performed 474 root evaluator evaluations with a maximum evaluation depth of 3. Performed 474 inverse root evaluator evaluations with a maximum inverse evaluation depth of 3. Never found a fixpoint. Largest state had 28 variables. [2018-11-23 03:23:40,573 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:40,573 INFO L398 sIntCurrentIteration]: Generating AbsInt predicates [2018-11-23 03:23:40,702 INFO L227 lantSequenceWeakener]: Weakened 31 states. On average, predicates are now at 53.97% of their original sizes. [2018-11-23 03:23:40,702 INFO L413 sIntCurrentIteration]: Unifying AI predicates [2018-11-23 03:23:41,105 INFO L415 sIntCurrentIteration]: We unified 37 AI predicates to 37 [2018-11-23 03:23:41,105 INFO L424 sIntCurrentIteration]: Finished generation of AbsInt predicates [2018-11-23 03:23:41,106 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-23 03:23:41,106 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [26] imperfect sequences [7] total 31 [2018-11-23 03:23:41,106 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 03:23:41,107 INFO L459 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-11-23 03:23:41,107 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-11-23 03:23:41,107 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=62, Invalid=588, Unknown=0, NotChecked=0, Total=650 [2018-11-23 03:23:41,108 INFO L87 Difference]: Start difference. First operand 45 states and 51 transitions. Second operand 26 states. [2018-11-23 03:23:43,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 03:23:43,020 INFO L93 Difference]: Finished difference Result 87 states and 98 transitions. [2018-11-23 03:23:43,020 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2018-11-23 03:23:43,020 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 38 [2018-11-23 03:23:43,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 03:23:43,022 INFO L225 Difference]: With dead ends: 87 [2018-11-23 03:23:43,022 INFO L226 Difference]: Without dead ends: 79 [2018-11-23 03:23:43,023 INFO L631 BasicCegarLoop]: 2 DeclaredPredicates, 55 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 460 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=166, Invalid=1726, Unknown=0, NotChecked=0, Total=1892 [2018-11-23 03:23:43,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2018-11-23 03:23:43,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 71. [2018-11-23 03:23:43,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 71 states. [2018-11-23 03:23:43,033 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 83 transitions. [2018-11-23 03:23:43,034 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 83 transitions. Word has length 38 [2018-11-23 03:23:43,034 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 03:23:43,034 INFO L480 AbstractCegarLoop]: Abstraction has 71 states and 83 transitions. [2018-11-23 03:23:43,034 INFO L481 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-11-23 03:23:43,034 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 83 transitions. [2018-11-23 03:23:43,035 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 03:23:43,035 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 03:23:43,035 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 03:23:43,036 INFO L423 AbstractCegarLoop]: === Iteration 4 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 03:23:43,036 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:43,036 INFO L82 PathProgramCache]: Analyzing trace with hash -988491854, now seen corresponding path program 1 times [2018-11-23 03:23:43,036 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 03:23:43,037 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:43,037 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:43,037 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:43,037 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 03:23:43,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:43,094 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 03:23:43,094 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 03:23:43,094 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 03:23:43,094 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 46 with the following transitions: [2018-11-23 03:23:43,095 INFO L202 CegarAbsIntRunner]: [0], [2], [3], [4], [5], [14], [17], [19], [22], [25], [29], [30], [36], [38], [40], [43], [54], [57], [62], [65], [66], [67], [68], [69], [70], [72], [73], [74], [76], [77], [78], [79], [80], [81], [82] [2018-11-23 03:23:43,096 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 03:23:43,096 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 03:23:43,131 INFO L263 AbstractInterpreter]: Some error location(s) were reachable [2018-11-23 03:23:43,131 INFO L272 AbstractInterpreter]: Visited 35 different actions 87 times. Merged at 9 different actions 23 times. Never widened. Performed 562 root evaluator evaluations with a maximum evaluation depth of 6. Performed 562 inverse root evaluator evaluations with a maximum inverse evaluation depth of 6. Never found a fixpoint. Largest state had 29 variables. [2018-11-23 03:23:43,137 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:43,138 INFO L422 seRefinementStrategy]: Interpolation failed due to KNOWN_IGNORE: Unknown [2018-11-23 03:23:43,138 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 03:23:43,138 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode Z3_IG No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 03:23:43,148 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:43,148 INFO L286 anRefinementStrategy]: Using traceCheck mode Z3_IG with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: FPandBP) [2018-11-23 03:23:43,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:43,190 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 03:23:43,483 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 1 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 03:23:43,483 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-23 03:23:44,041 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 03:23:44,056 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 3 imperfect interpolant sequences. [2018-11-23 03:23:44,057 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 20, 22] total 41 [2018-11-23 03:23:44,057 INFO L249 anRefinementStrategy]: Using the first two imperfect interpolant sequences [2018-11-23 03:23:44,057 INFO L459 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-11-23 03:23:44,057 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-11-23 03:23:44,057 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=135, Invalid=1505, Unknown=0, NotChecked=0, Total=1640 [2018-11-23 03:23:44,058 INFO L87 Difference]: Start difference. First operand 71 states and 83 transitions. Second operand 25 states. [2018-11-23 03:23:44,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 03:23:44,580 INFO L93 Difference]: Finished difference Result 120 states and 145 transitions. [2018-11-23 03:23:44,581 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-11-23 03:23:44,581 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 45 [2018-11-23 03:23:44,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 03:23:44,581 INFO L225 Difference]: With dead ends: 120 [2018-11-23 03:23:44,582 INFO L226 Difference]: Without dead ends: 73 [2018-11-23 03:23:44,583 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 57 SyntacticMatches, 5 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 528 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=304, Invalid=2666, Unknown=0, NotChecked=0, Total=2970 [2018-11-23 03:23:44,583 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2018-11-23 03:23:44,590 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2018-11-23 03:23:44,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 73 states. [2018-11-23 03:23:44,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 85 transitions. [2018-11-23 03:23:44,591 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 85 transitions. Word has length 45 [2018-11-23 03:23:44,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 03:23:44,591 INFO L480 AbstractCegarLoop]: Abstraction has 73 states and 85 transitions. [2018-11-23 03:23:44,591 INFO L481 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-11-23 03:23:44,592 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 85 transitions. [2018-11-23 03:23:44,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 03:23:44,594 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 03:23:44,594 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 03:23:44,594 INFO L423 AbstractCegarLoop]: === Iteration 5 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 03:23:44,595 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:44,595 INFO L82 PathProgramCache]: Analyzing trace with hash 1122798515, now seen corresponding path program 1 times [2018-11-23 03:23:44,595 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 03:23:44,596 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:44,596 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:44,596 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:44,597 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 03:23:44,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:44,773 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 03:23:44,773 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 03:23:44,774 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 03:23:44,774 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 46 with the following transitions: [2018-11-23 03:23:44,774 INFO L202 CegarAbsIntRunner]: [0], [2], [3], [4], [5], [14], [17], [19], [22], [25], [29], [30], [36], [38], [40], [43], [54], [57], [62], [66], [67], [68], [69], [70], [72], [73], [74], [76], [77], [78], [79], [80], [81], [82] [2018-11-23 03:23:44,775 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 03:23:44,775 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 03:23:44,804 INFO L266 AbstractInterpreter]: Error location(s) were unreachable [2018-11-23 03:23:44,804 INFO L272 AbstractInterpreter]: Visited 32 different actions 48 times. Never merged. Never widened. Performed 330 root evaluator evaluations with a maximum evaluation depth of 4. Performed 330 inverse root evaluator evaluations with a maximum inverse evaluation depth of 4. Never found a fixpoint. Largest state had 29 variables. [2018-11-23 03:23:44,811 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:44,811 INFO L398 sIntCurrentIteration]: Generating AbsInt predicates [2018-11-23 03:23:44,847 INFO L227 lantSequenceWeakener]: Weakened 38 states. On average, predicates are now at 56.75% of their original sizes. [2018-11-23 03:23:44,848 INFO L413 sIntCurrentIteration]: Unifying AI predicates [2018-11-23 03:23:45,109 INFO L415 sIntCurrentIteration]: We unified 44 AI predicates to 44 [2018-11-23 03:23:45,109 INFO L424 sIntCurrentIteration]: Finished generation of AbsInt predicates [2018-11-23 03:23:45,109 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-23 03:23:45,110 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [30] imperfect sequences [19] total 47 [2018-11-23 03:23:45,110 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 03:23:45,110 INFO L459 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-11-23 03:23:45,110 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-11-23 03:23:45,111 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=72, Invalid=798, Unknown=0, NotChecked=0, Total=870 [2018-11-23 03:23:45,111 INFO L87 Difference]: Start difference. First operand 73 states and 85 transitions. Second operand 30 states. [2018-11-23 03:23:47,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 03:23:47,514 INFO L93 Difference]: Finished difference Result 103 states and 117 transitions. [2018-11-23 03:23:47,515 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2018-11-23 03:23:47,515 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 45 [2018-11-23 03:23:47,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 03:23:47,516 INFO L225 Difference]: With dead ends: 103 [2018-11-23 03:23:47,516 INFO L226 Difference]: Without dead ends: 97 [2018-11-23 03:23:47,517 INFO L631 BasicCegarLoop]: 2 DeclaredPredicates, 61 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 530 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=158, Invalid=2004, Unknown=0, NotChecked=0, Total=2162 [2018-11-23 03:23:47,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2018-11-23 03:23:47,530 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 91. [2018-11-23 03:23:47,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 91 states. [2018-11-23 03:23:47,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 105 transitions. [2018-11-23 03:23:47,532 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 105 transitions. Word has length 45 [2018-11-23 03:23:47,532 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 03:23:47,532 INFO L480 AbstractCegarLoop]: Abstraction has 91 states and 105 transitions. [2018-11-23 03:23:47,532 INFO L481 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-11-23 03:23:47,532 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 105 transitions. [2018-11-23 03:23:47,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 03:23:47,533 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 03:23:47,533 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 03:23:47,533 INFO L423 AbstractCegarLoop]: === Iteration 6 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 03:23:47,534 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:47,534 INFO L82 PathProgramCache]: Analyzing trace with hash 313451889, now seen corresponding path program 1 times [2018-11-23 03:23:47,534 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 03:23:47,535 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:47,535 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:47,535 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:47,535 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 03:23:47,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:47,684 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 03:23:47,684 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 03:23:47,684 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 03:23:47,684 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 46 with the following transitions: [2018-11-23 03:23:47,684 INFO L202 CegarAbsIntRunner]: [0], [2], [3], [4], [5], [14], [17], [19], [22], [27], [29], [30], [36], [38], [40], [43], [54], [57], [62], [66], [67], [68], [69], [70], [72], [73], [74], [76], [77], [78], [79], [80], [81], [82] [2018-11-23 03:23:47,685 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 03:23:47,685 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 03:23:47,700 INFO L266 AbstractInterpreter]: Error location(s) were unreachable [2018-11-23 03:23:47,700 INFO L272 AbstractInterpreter]: Visited 32 different actions 48 times. Never merged. Never widened. Performed 322 root evaluator evaluations with a maximum evaluation depth of 4. Performed 322 inverse root evaluator evaluations with a maximum inverse evaluation depth of 4. Never found a fixpoint. Largest state had 29 variables. [2018-11-23 03:23:47,701 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:47,701 INFO L398 sIntCurrentIteration]: Generating AbsInt predicates [2018-11-23 03:23:47,757 INFO L227 lantSequenceWeakener]: Weakened 38 states. On average, predicates are now at 56.75% of their original sizes. [2018-11-23 03:23:47,758 INFO L413 sIntCurrentIteration]: Unifying AI predicates [2018-11-23 03:23:47,984 INFO L415 sIntCurrentIteration]: We unified 44 AI predicates to 44 [2018-11-23 03:23:47,984 INFO L424 sIntCurrentIteration]: Finished generation of AbsInt predicates [2018-11-23 03:23:47,985 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-23 03:23:47,985 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [29] imperfect sequences [14] total 41 [2018-11-23 03:23:47,985 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 03:23:47,985 INFO L459 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-11-23 03:23:47,985 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-11-23 03:23:47,985 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=95, Invalid=717, Unknown=0, NotChecked=0, Total=812 [2018-11-23 03:23:47,986 INFO L87 Difference]: Start difference. First operand 91 states and 105 transitions. Second operand 29 states. [2018-11-23 03:23:49,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 03:23:49,639 INFO L93 Difference]: Finished difference Result 94 states and 107 transitions. [2018-11-23 03:23:49,639 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2018-11-23 03:23:49,640 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 45 [2018-11-23 03:23:49,640 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 03:23:49,642 INFO L225 Difference]: With dead ends: 94 [2018-11-23 03:23:49,644 INFO L226 Difference]: Without dead ends: 82 [2018-11-23 03:23:49,645 INFO L631 BasicCegarLoop]: 2 DeclaredPredicates, 60 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 488 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=194, Invalid=1786, Unknown=0, NotChecked=0, Total=1980 [2018-11-23 03:23:49,645 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2018-11-23 03:23:49,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 80. [2018-11-23 03:23:49,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 80 states. [2018-11-23 03:23:49,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 90 transitions. [2018-11-23 03:23:49,658 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 90 transitions. Word has length 45 [2018-11-23 03:23:49,658 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 03:23:49,658 INFO L480 AbstractCegarLoop]: Abstraction has 80 states and 90 transitions. [2018-11-23 03:23:49,659 INFO L481 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-11-23 03:23:49,659 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 90 transitions. [2018-11-23 03:23:49,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 03:23:49,660 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 03:23:49,660 INFO L402 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 03:23:49,660 INFO L423 AbstractCegarLoop]: === Iteration 7 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 03:23:49,660 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:49,660 INFO L82 PathProgramCache]: Analyzing trace with hash 681136710, now seen corresponding path program 1 times [2018-11-23 03:23:49,661 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 03:23:49,662 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:49,662 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:49,662 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:49,663 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 03:23:49,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:49,862 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 8 proven. 5 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:23:49,863 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 03:23:49,863 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 03:23:49,863 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 58 with the following transitions: [2018-11-23 03:23:49,863 INFO L202 CegarAbsIntRunner]: [0], [2], [3], [4], [5], [6], [9], [13], [14], [17], [19], [22], [25], [29], [30], [36], [38], [40], [43], [54], [57], [62], [66], [67], [68], [69], [70], [72], [73], [74], [76], [77], [78], [79], [80], [81], [82], [83], [84], [85], [86] [2018-11-23 03:23:49,864 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 03:23:49,865 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 03:23:49,883 INFO L266 AbstractInterpreter]: Error location(s) were unreachable [2018-11-23 03:23:49,883 INFO L272 AbstractInterpreter]: Visited 36 different actions 52 times. Never merged. Never widened. Performed 365 root evaluator evaluations with a maximum evaluation depth of 4. Performed 365 inverse root evaluator evaluations with a maximum inverse evaluation depth of 4. Never found a fixpoint. Largest state had 29 variables. [2018-11-23 03:23:49,885 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:49,885 INFO L398 sIntCurrentIteration]: Generating AbsInt predicates [2018-11-23 03:23:49,919 INFO L227 lantSequenceWeakener]: Weakened 45 states. On average, predicates are now at 58.3% of their original sizes. [2018-11-23 03:23:49,919 INFO L413 sIntCurrentIteration]: Unifying AI predicates [2018-11-23 03:23:50,351 INFO L415 sIntCurrentIteration]: We unified 56 AI predicates to 56 [2018-11-23 03:23:50,351 INFO L424 sIntCurrentIteration]: Finished generation of AbsInt predicates [2018-11-23 03:23:50,351 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-23 03:23:50,352 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [35] imperfect sequences [17] total 50 [2018-11-23 03:23:50,352 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 03:23:50,352 INFO L459 AbstractCegarLoop]: Interpolant automaton has 35 states [2018-11-23 03:23:50,352 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2018-11-23 03:23:50,353 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=88, Invalid=1102, Unknown=0, NotChecked=0, Total=1190 [2018-11-23 03:23:50,353 INFO L87 Difference]: Start difference. First operand 80 states and 90 transitions. Second operand 35 states. [2018-11-23 03:23:51,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 03:23:51,987 INFO L93 Difference]: Finished difference Result 118 states and 130 transitions. [2018-11-23 03:23:51,987 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2018-11-23 03:23:51,987 INFO L78 Accepts]: Start accepts. Automaton has 35 states. Word has length 57 [2018-11-23 03:23:51,988 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 03:23:51,988 INFO L225 Difference]: With dead ends: 118 [2018-11-23 03:23:51,988 INFO L226 Difference]: Without dead ends: 103 [2018-11-23 03:23:51,989 INFO L631 BasicCegarLoop]: 2 DeclaredPredicates, 74 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 730 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=179, Invalid=2577, Unknown=0, NotChecked=0, Total=2756 [2018-11-23 03:23:51,990 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2018-11-23 03:23:51,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 87. [2018-11-23 03:23:52,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 87 states. [2018-11-23 03:23:52,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 96 transitions. [2018-11-23 03:23:52,000 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 96 transitions. Word has length 57 [2018-11-23 03:23:52,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 03:23:52,001 INFO L480 AbstractCegarLoop]: Abstraction has 87 states and 96 transitions. [2018-11-23 03:23:52,001 INFO L481 AbstractCegarLoop]: Interpolant automaton has 35 states. [2018-11-23 03:23:52,001 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 96 transitions. [2018-11-23 03:23:52,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 03:23:52,002 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 03:23:52,002 INFO L402 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 03:23:52,002 INFO L423 AbstractCegarLoop]: === Iteration 8 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 03:23:52,002 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:52,002 INFO L82 PathProgramCache]: Analyzing trace with hash -128209916, now seen corresponding path program 1 times [2018-11-23 03:23:52,002 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 03:23:52,003 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:52,003 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:52,004 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:52,004 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 03:23:52,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:52,247 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-11-23 03:23:52,248 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 03:23:52,248 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 03:23:52,248 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 58 with the following transitions: [2018-11-23 03:23:52,248 INFO L202 CegarAbsIntRunner]: [0], [2], [3], [4], [5], [6], [11], [13], [14], [17], [19], [22], [25], [29], [30], [36], [38], [40], [43], [54], [57], [62], [66], [67], [68], [69], [70], [72], [73], [74], [76], [77], [78], [79], [80], [81], [82], [83], [84], [85], [86] [2018-11-23 03:23:52,249 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 03:23:52,249 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 03:23:52,269 INFO L266 AbstractInterpreter]: Error location(s) were unreachable [2018-11-23 03:23:52,269 INFO L272 AbstractInterpreter]: Visited 39 different actions 61 times. Never merged. Never widened. Performed 417 root evaluator evaluations with a maximum evaluation depth of 4. Performed 417 inverse root evaluator evaluations with a maximum inverse evaluation depth of 4. Never found a fixpoint. Largest state had 29 variables. [2018-11-23 03:23:52,277 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:52,277 INFO L398 sIntCurrentIteration]: Generating AbsInt predicates [2018-11-23 03:23:52,308 INFO L227 lantSequenceWeakener]: Weakened 50 states. On average, predicates are now at 59.57% of their original sizes. [2018-11-23 03:23:52,308 INFO L413 sIntCurrentIteration]: Unifying AI predicates [2018-11-23 03:23:52,678 INFO L415 sIntCurrentIteration]: We unified 56 AI predicates to 56 [2018-11-23 03:23:52,678 INFO L424 sIntCurrentIteration]: Finished generation of AbsInt predicates [2018-11-23 03:23:52,678 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-23 03:23:52,678 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [37] imperfect sequences [20] total 55 [2018-11-23 03:23:52,679 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 03:23:52,679 INFO L459 AbstractCegarLoop]: Interpolant automaton has 37 states [2018-11-23 03:23:52,679 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2018-11-23 03:23:52,679 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=92, Invalid=1240, Unknown=0, NotChecked=0, Total=1332 [2018-11-23 03:23:52,680 INFO L87 Difference]: Start difference. First operand 87 states and 96 transitions. Second operand 37 states. [2018-11-23 03:23:54,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 03:23:54,500 INFO L93 Difference]: Finished difference Result 121 states and 131 transitions. [2018-11-23 03:23:54,500 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2018-11-23 03:23:54,501 INFO L78 Accepts]: Start accepts. Automaton has 37 states. Word has length 57 [2018-11-23 03:23:54,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 03:23:54,501 INFO L225 Difference]: With dead ends: 121 [2018-11-23 03:23:54,502 INFO L226 Difference]: Without dead ends: 110 [2018-11-23 03:23:54,502 INFO L631 BasicCegarLoop]: 2 DeclaredPredicates, 76 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 840 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=194, Invalid=2998, Unknown=0, NotChecked=0, Total=3192 [2018-11-23 03:23:54,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110 states. [2018-11-23 03:23:54,508 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110 to 97. [2018-11-23 03:23:54,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 97 states. [2018-11-23 03:23:54,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 107 transitions. [2018-11-23 03:23:54,509 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 107 transitions. Word has length 57 [2018-11-23 03:23:54,509 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 03:23:54,509 INFO L480 AbstractCegarLoop]: Abstraction has 97 states and 107 transitions. [2018-11-23 03:23:54,509 INFO L481 AbstractCegarLoop]: Interpolant automaton has 37 states. [2018-11-23 03:23:54,509 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 107 transitions. [2018-11-23 03:23:54,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 03:23:54,510 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 03:23:54,510 INFO L402 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 03:23:54,510 INFO L423 AbstractCegarLoop]: === Iteration 9 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 03:23:54,510 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:54,510 INFO L82 PathProgramCache]: Analyzing trace with hash 94330696, now seen corresponding path program 1 times [2018-11-23 03:23:54,510 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 03:23:54,511 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:54,511 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:54,511 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:54,511 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 03:23:54,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:54,641 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 8 proven. 5 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:23:54,641 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 03:23:54,641 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 03:23:54,642 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 58 with the following transitions: [2018-11-23 03:23:54,642 INFO L202 CegarAbsIntRunner]: [0], [2], [3], [4], [5], [6], [9], [13], [14], [17], [19], [22], [25], [27], [29], [30], [36], [38], [40], [43], [54], [57], [62], [66], [67], [68], [69], [70], [72], [73], [74], [76], [77], [78], [79], [80], [81], [82], [83], [84], [85], [86] [2018-11-23 03:23:54,643 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 03:23:54,643 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 03:23:54,672 INFO L266 AbstractInterpreter]: Error location(s) were unreachable [2018-11-23 03:23:54,673 INFO L272 AbstractInterpreter]: Visited 40 different actions 88 times. Merged at 4 different actions 11 times. Never widened. Performed 766 root evaluator evaluations with a maximum evaluation depth of 4. Performed 766 inverse root evaluator evaluations with a maximum inverse evaluation depth of 4. Found 2 fixpoints after 2 different actions. Largest state had 29 variables. [2018-11-23 03:23:54,674 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:54,674 INFO L398 sIntCurrentIteration]: Generating AbsInt predicates [2018-11-23 03:23:54,718 INFO L227 lantSequenceWeakener]: Weakened 50 states. On average, predicates are now at 59.82% of their original sizes. [2018-11-23 03:23:54,718 INFO L413 sIntCurrentIteration]: Unifying AI predicates [2018-11-23 03:23:55,070 INFO L415 sIntCurrentIteration]: We unified 56 AI predicates to 56 [2018-11-23 03:23:55,070 INFO L424 sIntCurrentIteration]: Finished generation of AbsInt predicates [2018-11-23 03:23:55,070 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-23 03:23:55,070 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [38] imperfect sequences [17] total 53 [2018-11-23 03:23:55,070 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 03:23:55,071 INFO L459 AbstractCegarLoop]: Interpolant automaton has 38 states [2018-11-23 03:23:55,071 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2018-11-23 03:23:55,071 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=178, Invalid=1228, Unknown=0, NotChecked=0, Total=1406 [2018-11-23 03:23:55,071 INFO L87 Difference]: Start difference. First operand 97 states and 107 transitions. Second operand 38 states. [2018-11-23 03:23:57,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 03:23:57,093 INFO L93 Difference]: Finished difference Result 165 states and 179 transitions. [2018-11-23 03:23:57,093 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2018-11-23 03:23:57,093 INFO L78 Accepts]: Start accepts. Automaton has 38 states. Word has length 57 [2018-11-23 03:23:57,094 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 03:23:57,094 INFO L225 Difference]: With dead ends: 165 [2018-11-23 03:23:57,095 INFO L226 Difference]: Without dead ends: 123 [2018-11-23 03:23:57,095 INFO L631 BasicCegarLoop]: 2 DeclaredPredicates, 82 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 62 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1057 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=395, Invalid=3637, Unknown=0, NotChecked=0, Total=4032 [2018-11-23 03:23:57,096 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123 states. [2018-11-23 03:23:57,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123 to 91. [2018-11-23 03:23:57,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 91 states. [2018-11-23 03:23:57,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 95 transitions. [2018-11-23 03:23:57,104 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 95 transitions. Word has length 57 [2018-11-23 03:23:57,104 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 03:23:57,104 INFO L480 AbstractCegarLoop]: Abstraction has 91 states and 95 transitions. [2018-11-23 03:23:57,104 INFO L481 AbstractCegarLoop]: Interpolant automaton has 38 states. [2018-11-23 03:23:57,104 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 95 transitions. [2018-11-23 03:23:57,105 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 03:23:57,105 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 03:23:57,105 INFO L402 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 03:23:57,105 INFO L423 AbstractCegarLoop]: === Iteration 10 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 03:23:57,106 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:57,106 INFO L82 PathProgramCache]: Analyzing trace with hash -945858366, now seen corresponding path program 1 times [2018-11-23 03:23:57,106 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 03:23:57,106 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:57,107 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:57,107 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:57,107 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 03:23:57,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:57,271 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-11-23 03:23:57,271 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 03:23:57,271 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 03:23:57,271 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 58 with the following transitions: [2018-11-23 03:23:57,272 INFO L202 CegarAbsIntRunner]: [0], [2], [3], [4], [5], [6], [11], [13], [14], [17], [19], [22], [25], [27], [29], [30], [36], [38], [40], [43], [54], [57], [62], [66], [67], [68], [69], [70], [72], [73], [74], [76], [77], [78], [79], [80], [81], [82], [83], [84], [85], [86] [2018-11-23 03:23:57,273 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 03:23:57,273 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 03:23:57,306 INFO L263 AbstractInterpreter]: Some error location(s) were reachable [2018-11-23 03:23:57,307 INFO L272 AbstractInterpreter]: Visited 42 different actions 101 times. Merged at 5 different actions 14 times. Never widened. Performed 1029 root evaluator evaluations with a maximum evaluation depth of 4. Performed 1029 inverse root evaluator evaluations with a maximum inverse evaluation depth of 4. Found 2 fixpoints after 2 different actions. Largest state had 29 variables. [2018-11-23 03:23:57,312 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:57,313 INFO L422 seRefinementStrategy]: Interpolation failed due to KNOWN_IGNORE: Unknown [2018-11-23 03:23:57,313 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 03:23:57,313 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode Z3_IG No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 03:23:57,322 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:57,322 INFO L286 anRefinementStrategy]: Using traceCheck mode Z3_IG with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: FPandBP) [2018-11-23 03:23:57,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:57,348 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 03:23:57,447 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-11-23 03:23:57,447 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-23 03:23:57,715 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-11-23 03:23:57,729 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 3 imperfect interpolant sequences. [2018-11-23 03:23:57,730 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 20] total 26 [2018-11-23 03:23:57,730 INFO L249 anRefinementStrategy]: Using the first two imperfect interpolant sequences [2018-11-23 03:23:57,730 INFO L459 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-11-23 03:23:57,730 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-11-23 03:23:57,730 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=587, Unknown=0, NotChecked=0, Total=650 [2018-11-23 03:23:57,730 INFO L87 Difference]: Start difference. First operand 91 states and 95 transitions. Second operand 26 states. [2018-11-23 03:23:58,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 03:23:58,286 INFO L93 Difference]: Finished difference Result 110 states and 116 transitions. [2018-11-23 03:23:58,286 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2018-11-23 03:23:58,286 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 57 [2018-11-23 03:23:58,286 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 03:23:58,287 INFO L225 Difference]: With dead ends: 110 [2018-11-23 03:23:58,287 INFO L226 Difference]: Without dead ends: 103 [2018-11-23 03:23:58,287 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 92 SyntacticMatches, 21 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 280 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=206, Invalid=1516, Unknown=0, NotChecked=0, Total=1722 [2018-11-23 03:23:58,287 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2018-11-23 03:23:58,293 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 79. [2018-11-23 03:23:58,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 79 states. [2018-11-23 03:23:58,293 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 81 transitions. [2018-11-23 03:23:58,294 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 81 transitions. Word has length 57 [2018-11-23 03:23:58,294 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 03:23:58,294 INFO L480 AbstractCegarLoop]: Abstraction has 79 states and 81 transitions. [2018-11-23 03:23:58,294 INFO L481 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-11-23 03:23:58,294 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 81 transitions. [2018-11-23 03:23:58,295 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 03:23:58,295 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 03:23:58,295 INFO L402 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 03:23:58,295 INFO L423 AbstractCegarLoop]: === Iteration 11 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 03:23:58,295 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:58,295 INFO L82 PathProgramCache]: Analyzing trace with hash -1081406834, now seen corresponding path program 1 times [2018-11-23 03:23:58,296 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 03:23:58,296 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:58,296 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:23:58,296 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:23:58,297 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 03:23:58,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:23:58,492 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 21 proven. 6 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:23:58,493 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 03:23:58,493 INFO L192 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-11-23 03:23:58,493 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 65 with the following transitions: [2018-11-23 03:23:58,493 INFO L202 CegarAbsIntRunner]: [0], [2], [3], [4], [5], [6], [11], [13], [14], [17], [19], [22], [25], [29], [30], [36], [38], [40], [43], [54], [57], [62], [66], [67], [68], [69], [70], [72], [73], [74], [76], [77], [78], [79], [80], [81], [82], [83], [84], [85], [86], [87], [88] [2018-11-23 03:23:58,494 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, ExplicitValueDomain] [2018-11-23 03:23:58,494 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-11-23 03:23:58,517 INFO L266 AbstractInterpreter]: Error location(s) were unreachable [2018-11-23 03:23:58,518 INFO L272 AbstractInterpreter]: Visited 41 different actions 69 times. Never merged. Never widened. Performed 471 root evaluator evaluations with a maximum evaluation depth of 4. Performed 471 inverse root evaluator evaluations with a maximum inverse evaluation depth of 4. Never found a fixpoint. Largest state had 29 variables. [2018-11-23 03:23:58,524 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:23:58,525 INFO L398 sIntCurrentIteration]: Generating AbsInt predicates [2018-11-23 03:23:58,570 INFO L227 lantSequenceWeakener]: Weakened 57 states. On average, predicates are now at 60.63% of their original sizes. [2018-11-23 03:23:58,570 INFO L413 sIntCurrentIteration]: Unifying AI predicates [2018-11-23 03:23:58,968 INFO L415 sIntCurrentIteration]: We unified 63 AI predicates to 63 [2018-11-23 03:23:58,968 INFO L424 sIntCurrentIteration]: Finished generation of AbsInt predicates [2018-11-23 03:23:58,968 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-23 03:23:58,968 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [40] imperfect sequences [19] total 57 [2018-11-23 03:23:58,968 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 03:23:58,969 INFO L459 AbstractCegarLoop]: Interpolant automaton has 40 states [2018-11-23 03:23:58,969 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2018-11-23 03:23:58,969 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=105, Invalid=1455, Unknown=0, NotChecked=0, Total=1560 [2018-11-23 03:23:58,969 INFO L87 Difference]: Start difference. First operand 79 states and 81 transitions. Second operand 40 states. [2018-11-23 03:24:00,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 03:24:00,378 INFO L93 Difference]: Finished difference Result 100 states and 101 transitions. [2018-11-23 03:24:00,378 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2018-11-23 03:24:00,378 INFO L78 Accepts]: Start accepts. Automaton has 40 states. Word has length 64 [2018-11-23 03:24:00,378 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 03:24:00,379 INFO L225 Difference]: With dead ends: 100 [2018-11-23 03:24:00,379 INFO L226 Difference]: Without dead ends: 92 [2018-11-23 03:24:00,379 INFO L631 BasicCegarLoop]: 2 DeclaredPredicates, 82 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 921 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=204, Invalid=3218, Unknown=0, NotChecked=0, Total=3422 [2018-11-23 03:24:00,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2018-11-23 03:24:00,384 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 86. [2018-11-23 03:24:00,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 86 states. [2018-11-23 03:24:00,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 88 transitions. [2018-11-23 03:24:00,385 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 88 transitions. Word has length 64 [2018-11-23 03:24:00,385 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 03:24:00,385 INFO L480 AbstractCegarLoop]: Abstraction has 86 states and 88 transitions. [2018-11-23 03:24:00,385 INFO L481 AbstractCegarLoop]: Interpolant automaton has 40 states. [2018-11-23 03:24:00,386 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 88 transitions. [2018-11-23 03:24:00,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 03:24:00,386 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 03:24:00,386 INFO L402 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 03:24:00,387 INFO L423 AbstractCegarLoop]: === Iteration 12 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 03:24:00,387 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:24:00,387 INFO L82 PathProgramCache]: Analyzing trace with hash -1890753460, now seen corresponding path program 1 times [2018-11-23 03:24:00,387 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 03:24:00,387 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:24:00,388 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 03:24:00,388 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 03:24:00,388 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 03:24:00,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 03:24:00,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 03:24:00,423 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=15, |~#head~0.offset|=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [?] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] assume true; VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET #73#return; VAL [|~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [|my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ~size := #in~size; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [|__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ~size := #in~size; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] assume ~size > 0; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#t~nondet29|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume true; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] RET #69#return; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#t~ret30.base|=0, |my_malloc_#t~ret30.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume true; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] RET #77#return; VAL [|main_#t~ret32.base|=0, |main_#t~ret32.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [|my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~size := #in~size; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [|__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~size := #in~size; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume ~size > 0; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#t~nondet29|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #69#return; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#t~ret30.base|=0, |my_malloc_#t~ret30.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #79#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, |main_#t~ret33.base|=0, |main_#t~ret33.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |list_add_#t~nondet31|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #81#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |list_add_#t~nondet31|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #83#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [|list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #85#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |list_add_#t~nondet31|=0, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(0 != #t~nondet31);havoc #t~nondet31; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #87#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call __blast_assert(); VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !false; VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=15, ~#head~0.offset=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [L867] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0; [L887] ~elem~0.base, ~elem~0.offset := 0, 0; [L900] call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ensures true; VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L903] havoc ~dev1~0.base, ~dev1~0.offset; [L903] havoc ~dev2~0.base, ~dev2~0.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L904] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L904] RET call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#t~ret32.base=0, #t~ret32.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L904] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset; [L904] havoc #t~ret32.base, #t~ret32.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L905] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L905] RET call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#t~ret33.base=0, #t~ret33.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L905] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset; [L905] havoc #t~ret33.base, #t~ret33.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L906-L915] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L907] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L907] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L908] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L908] RET call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L896-L897] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ensures true; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] RET call list_del(~dev2~0.base, ~dev2~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L910] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=0, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume !(0 != #t~nondet31); [L891] havoc #t~nondet31; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L910] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L913] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L6] assert false; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=15, ~#head~0.offset=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [L867] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0; [L887] ~elem~0.base, ~elem~0.offset := 0, 0; [L900] call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ensures true; VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L903] havoc ~dev1~0.base, ~dev1~0.offset; [L903] havoc ~dev2~0.base, ~dev2~0.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L904] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L904] RET call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#t~ret32.base=0, #t~ret32.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L904] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset; [L904] havoc #t~ret32.base, #t~ret32.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L905] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L905] RET call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#t~ret33.base=0, #t~ret33.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L905] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset; [L905] havoc #t~ret33.base, #t~ret33.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L906-L915] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L907] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L907] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L908] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L908] RET call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L896-L897] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ensures true; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] RET call list_del(~dev2~0.base, ~dev2~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L910] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=0, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume !(0 != #t~nondet31); [L891] havoc #t~nondet31; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L910] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L913] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L6] assert false; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] ----- [2018-11-23 03:24:00,593 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 12 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# [2018-11-23 03:24:00,593 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 15 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L867] void * guard_malloc_counter = 0; [L887] struct list_head *elem = ((void *)0); [L900] static struct list_head head; VAL [\old(elem)=13, \old(elem)=9, \old(guard_malloc_counter)=11, \old(guard_malloc_counter)=10, \old(head)=null, \old(head)=null, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L903] struct list_head *dev1, *dev2; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L904] CALL, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, __getMemory(size)={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] return __getMemory(size); [L904] RET, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, my_malloc(sizeof(*dev1))={0:1}] [L904] dev1 = my_malloc(sizeof(*dev1)) [L905] CALL, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, \result={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, __getMemory(size)={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] return __getMemory(size); [L905] RET, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, my_malloc(sizeof(*dev2))={0:2}] [L905] dev2 = my_malloc(sizeof(*dev2)) [L906] COND TRUE dev1!=((void *)0) && dev2!=((void *)0) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}] [L907] CALL list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L907] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L908] CALL list_add(dev1, &head) VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L908] RET list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L909] CALL list_del(dev2) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L896] COND FALSE !(entry==elem) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L909] RET list_del(dev2) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L910] CALL list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND FALSE !(__VERIFIER_nondet_int()) [L910] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L913] CALL list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L890] CALL __blast_assert () VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L6] __VERIFIER_error() VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] ----- [2018-11-23 03:24:00,665 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:24:00 BoogieIcfgContainer [2018-11-23 03:24:00,665 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 03:24:00,665 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 03:24:00,665 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 03:24:00,665 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 03:24:00,666 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:23:39" (3/4) ... [2018-11-23 03:24:00,668 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=15, |~#head~0.offset|=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [?] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] assume true; VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET #73#return; VAL [|~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [|my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ~size := #in~size; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [|__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ~size := #in~size; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] assume ~size > 0; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#t~nondet29|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume true; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] RET #69#return; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#t~ret30.base|=0, |my_malloc_#t~ret30.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume true; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] RET #77#return; VAL [|main_#t~ret32.base|=0, |main_#t~ret32.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [|my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~size := #in~size; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [|__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~size := #in~size; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume ~size > 0; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#t~nondet29|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #69#return; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#t~ret30.base|=0, |my_malloc_#t~ret30.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #79#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, |main_#t~ret33.base|=0, |main_#t~ret33.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |list_add_#t~nondet31|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #81#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |list_add_#t~nondet31|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #83#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [|list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #85#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |list_add_#t~nondet31|=0, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(0 != #t~nondet31);havoc #t~nondet31; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #87#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call __blast_assert(); VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !false; VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=15, ~#head~0.offset=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [L867] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0; [L887] ~elem~0.base, ~elem~0.offset := 0, 0; [L900] call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ensures true; VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L903] havoc ~dev1~0.base, ~dev1~0.offset; [L903] havoc ~dev2~0.base, ~dev2~0.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L904] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L904] RET call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#t~ret32.base=0, #t~ret32.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L904] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset; [L904] havoc #t~ret32.base, #t~ret32.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L905] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L905] RET call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#t~ret33.base=0, #t~ret33.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L905] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset; [L905] havoc #t~ret33.base, #t~ret33.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L906-L915] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L907] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L907] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L908] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L908] RET call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L896-L897] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ensures true; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] RET call list_del(~dev2~0.base, ~dev2~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L910] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=0, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume !(0 != #t~nondet31); [L891] havoc #t~nondet31; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L910] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L913] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L6] assert false; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=15, ~#head~0.offset=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [L867] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0; [L887] ~elem~0.base, ~elem~0.offset := 0, 0; [L900] call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ensures true; VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L903] havoc ~dev1~0.base, ~dev1~0.offset; [L903] havoc ~dev2~0.base, ~dev2~0.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L904] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L904] RET call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#t~ret32.base=0, #t~ret32.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L904] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset; [L904] havoc #t~ret32.base, #t~ret32.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L905] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L905] RET call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#t~ret33.base=0, #t~ret33.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L905] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset; [L905] havoc #t~ret33.base, #t~ret33.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L906-L915] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L907] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L907] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L908] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L908] RET call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L896-L897] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ensures true; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] RET call list_del(~dev2~0.base, ~dev2~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L910] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=0, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume !(0 != #t~nondet31); [L891] havoc #t~nondet31; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L910] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L913] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L6] assert false; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] ----- [2018-11-23 03:24:00,997 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 12 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# [2018-11-23 03:24:00,997 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 15 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L867] void * guard_malloc_counter = 0; [L887] struct list_head *elem = ((void *)0); [L900] static struct list_head head; VAL [\old(elem)=9, \old(elem)=13, \old(guard_malloc_counter)=10, \old(guard_malloc_counter)=11, \old(head)=null, \old(head)=null, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L903] struct list_head *dev1, *dev2; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L904] CALL, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, __getMemory(size)={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] return __getMemory(size); [L904] RET, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, my_malloc(sizeof(*dev1))={0:1}] [L904] dev1 = my_malloc(sizeof(*dev1)) [L905] CALL, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, \result={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, __getMemory(size)={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] return __getMemory(size); [L905] RET, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, my_malloc(sizeof(*dev2))={0:2}] [L905] dev2 = my_malloc(sizeof(*dev2)) [L906] COND TRUE dev1!=((void *)0) && dev2!=((void *)0) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}] [L907] CALL list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L907] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L908] CALL list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L908] RET list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L909] CALL list_del(dev2) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L896] COND FALSE !(entry==elem) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L909] RET list_del(dev2) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L910] CALL list_add(dev2, &head) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND FALSE !(__VERIFIER_nondet_int()) [L910] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L913] CALL list_add(dev1, &head) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L890] CALL __blast_assert () VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L6] __VERIFIER_error() VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] ----- [2018-11-23 03:24:01,131 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_c7f769d9-1c74-44f6-b4e4-606c1e6fab40/bin-2019/utaipan/witness.graphml [2018-11-23 03:24:01,131 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 03:24:01,132 INFO L168 Benchmark]: Toolchain (without parser) took 22052.36 ms. Allocated memory was 1.0 GB in the beginning and 1.6 GB in the end (delta: 522.2 MB). Free memory was 955.5 MB in the beginning and 1.2 GB in the end (delta: -241.4 MB). Peak memory consumption was 280.8 MB. Max. memory is 11.5 GB. [2018-11-23 03:24:01,133 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 982.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 03:24:01,133 INFO L168 Benchmark]: CACSL2BoogieTranslator took 335.93 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 141.6 MB). Free memory was 955.5 MB in the beginning and 1.1 GB in the end (delta: -174.5 MB). Peak memory consumption was 37.8 MB. Max. memory is 11.5 GB. [2018-11-23 03:24:01,133 INFO L168 Benchmark]: Boogie Procedure Inliner took 25.89 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. [2018-11-23 03:24:01,133 INFO L168 Benchmark]: Boogie Preprocessor took 19.17 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 03:24:01,134 INFO L168 Benchmark]: RCFGBuilder took 263.36 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 21.9 MB). Peak memory consumption was 21.9 MB. Max. memory is 11.5 GB. [2018-11-23 03:24:01,134 INFO L168 Benchmark]: TraceAbstraction took 20938.93 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 380.6 MB). Free memory was 1.1 GB in the beginning and 1.2 GB in the end (delta: -121.0 MB). Peak memory consumption was 259.6 MB. Max. memory is 11.5 GB. [2018-11-23 03:24:01,134 INFO L168 Benchmark]: Witness Printer took 465.93 ms. Allocated memory is still 1.6 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 26.8 MB). Peak memory consumption was 26.8 MB. Max. memory is 11.5 GB. [2018-11-23 03:24:01,136 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 982.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 335.93 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 141.6 MB). Free memory was 955.5 MB in the beginning and 1.1 GB in the end (delta: -174.5 MB). Peak memory consumption was 37.8 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 25.89 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 19.17 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 263.36 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 21.9 MB). Peak memory consumption was 21.9 MB. Max. memory is 11.5 GB. * TraceAbstraction took 20938.93 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 380.6 MB). Free memory was 1.1 GB in the beginning and 1.2 GB in the end (delta: -121.0 MB). Peak memory consumption was 259.6 MB. Max. memory is 11.5 GB. * Witness Printer took 465.93 ms. Allocated memory is still 1.6 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 26.8 MB). Peak memory consumption was 26.8 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 12 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 15 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 12 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 15 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 6]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L867] void * guard_malloc_counter = 0; [L887] struct list_head *elem = ((void *)0); [L900] static struct list_head head; VAL [\old(elem)=13, \old(elem)=9, \old(guard_malloc_counter)=11, \old(guard_malloc_counter)=10, \old(head)=null, \old(head)=null, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L903] struct list_head *dev1, *dev2; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L904] CALL, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, __getMemory(size)={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] return __getMemory(size); [L904] RET, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, my_malloc(sizeof(*dev1))={0:1}] [L904] dev1 = my_malloc(sizeof(*dev1)) [L905] CALL, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, \result={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, __getMemory(size)={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] return __getMemory(size); [L905] RET, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, my_malloc(sizeof(*dev2))={0:2}] [L905] dev2 = my_malloc(sizeof(*dev2)) [L906] COND TRUE dev1!=((void *)0) && dev2!=((void *)0) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}] [L907] CALL list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L907] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L908] CALL list_add(dev1, &head) VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L908] RET list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L909] CALL list_del(dev2) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L896] COND FALSE !(entry==elem) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L909] RET list_del(dev2) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L910] CALL list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND FALSE !(__VERIFIER_nondet_int()) [L910] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L913] CALL list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L890] CALL __blast_assert () VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L6] __VERIFIER_error() VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 48 locations, 1 error locations. UNSAFE Result, 20.8s OverallTime, 12 OverallIterations, 4 TraceHistogramMax, 14.0s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 467 SDtfs, 709 SDslu, 3623 SDs, 0 SdLazy, 4335 SolverSat, 516 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 4.1s Time, PredicateUnifierStatistics: 14 DeclaredPredicates, 773 GetRequests, 288 SyntacticMatches, 26 SemanticMatches, 459 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5835 ImplicationChecksByTransitivity, 5.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=97occurred in iteration=8, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.4s AbstIntTime, 9 AbstIntIterations, 7 AbstIntStrong, 0.9207656809482647 AbsIntWeakeningRatio, 1.3258426966292134 AbsIntAvgWeakeningVarsNumRemoved, 7.671348314606742 AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 11 MinimizatonAttempts, 107 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 2.6s InterpolantComputationTime, 682 NumberOfCodeBlocks, 682 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 705 ConstructedInterpolants, 0 QuantifiedInterpolants, 112654 SizeOfPredicates, 15 NumberOfNonLiveVariables, 551 ConjunctsInSsa, 56 ConjunctsInUnsatCore, 15 InterpolantComputations, 2 PerfectInterpolantSequences, 167/248 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...