./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9c69768cb083538b139479bdbb35676eb3378c1b .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9c69768cb083538b139479bdbb35676eb3378c1b .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 15:19:16,920 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 15:19:16,921 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 15:19:16,930 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 15:19:16,930 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 15:19:16,931 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 15:19:16,931 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 15:19:16,933 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 15:19:16,934 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 15:19:16,935 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 15:19:16,936 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 15:19:16,936 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 15:19:16,937 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 15:19:16,938 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 15:19:16,939 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 15:19:16,939 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 15:19:16,940 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 15:19:16,942 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 15:19:16,943 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 15:19:16,945 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 15:19:16,945 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 15:19:16,947 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 15:19:16,949 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 15:19:16,949 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 15:19:16,949 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 15:19:16,950 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 15:19:16,951 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 15:19:16,951 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 15:19:16,952 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 15:19:16,953 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 15:19:16,953 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 15:19:16,954 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 15:19:16,954 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 15:19:16,954 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 15:19:16,955 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 15:19:16,956 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 15:19:16,956 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2018-11-23 15:19:16,969 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 15:19:16,969 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 15:19:16,970 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 15:19:16,970 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 15:19:16,970 INFO L133 SettingsManager]: * User list type=DISABLED [2018-11-23 15:19:16,970 INFO L131 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2018-11-23 15:19:16,970 INFO L133 SettingsManager]: * Explicit value domain=true [2018-11-23 15:19:16,970 INFO L133 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2018-11-23 15:19:16,971 INFO L133 SettingsManager]: * Octagon Domain=false [2018-11-23 15:19:16,971 INFO L133 SettingsManager]: * Abstract domain=CompoundDomain [2018-11-23 15:19:16,971 INFO L133 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2018-11-23 15:19:16,971 INFO L133 SettingsManager]: * Use the RCFG-of-the-future interface=true [2018-11-23 15:19:16,971 INFO L133 SettingsManager]: * Interval Domain=false [2018-11-23 15:19:16,971 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 15:19:16,972 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 15:19:16,972 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 15:19:16,972 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 15:19:16,972 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 15:19:16,972 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 15:19:16,972 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 15:19:16,973 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 15:19:16,973 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 15:19:16,973 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 15:19:16,973 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 15:19:16,973 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 15:19:16,973 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 15:19:16,974 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 15:19:16,974 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 15:19:16,974 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 15:19:16,974 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 15:19:16,974 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 15:19:16,974 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 15:19:16,974 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 15:19:16,974 INFO L133 SettingsManager]: * Trace refinement strategy=TAIPAN [2018-11-23 15:19:16,974 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 15:19:16,975 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 15:19:16,975 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 15:19:16,975 INFO L133 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9c69768cb083538b139479bdbb35676eb3378c1b [2018-11-23 15:19:17,004 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 15:19:17,016 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 15:19:17,019 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 15:19:17,020 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 15:19:17,020 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 15:19:17,021 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/../../sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 15:19:17,077 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/data/cb67fd438/a1f1b5ef8b934eb5ab7138c260750505/FLAG65d016b58 [2018-11-23 15:19:17,538 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 15:19:17,538 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 15:19:17,553 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/data/cb67fd438/a1f1b5ef8b934eb5ab7138c260750505/FLAG65d016b58 [2018-11-23 15:19:18,045 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/data/cb67fd438/a1f1b5ef8b934eb5ab7138c260750505 [2018-11-23 15:19:18,048 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 15:19:18,049 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 15:19:18,050 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 15:19:18,050 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 15:19:18,053 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 15:19:18,054 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:19:18" (1/1) ... [2018-11-23 15:19:18,057 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@513aa0f8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18, skipping insertion in model container [2018-11-23 15:19:18,057 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:19:18" (1/1) ... [2018-11-23 15:19:18,066 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 15:19:18,111 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 15:19:18,494 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 15:19:18,506 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 15:19:18,602 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 15:19:18,617 INFO L195 MainTranslator]: Completed translation [2018-11-23 15:19:18,618 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18 WrapperNode [2018-11-23 15:19:18,618 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 15:19:18,619 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 15:19:18,619 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 15:19:18,619 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 15:19:18,625 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18" (1/1) ... [2018-11-23 15:19:18,645 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18" (1/1) ... [2018-11-23 15:19:18,655 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 15:19:18,655 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 15:19:18,655 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 15:19:18,655 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 15:19:18,663 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18" (1/1) ... [2018-11-23 15:19:18,663 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18" (1/1) ... [2018-11-23 15:19:18,671 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18" (1/1) ... [2018-11-23 15:19:18,671 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18" (1/1) ... [2018-11-23 15:19:18,714 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18" (1/1) ... [2018-11-23 15:19:18,722 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18" (1/1) ... [2018-11-23 15:19:18,726 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18" (1/1) ... [2018-11-23 15:19:18,730 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 15:19:18,731 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 15:19:18,731 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 15:19:18,731 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 15:19:18,733 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 15:19:18,792 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 15:19:18,792 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 15:19:18,792 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 15:19:18,792 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 15:19:18,792 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 15:19:18,792 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 15:19:18,792 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 15:19:18,793 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 15:19:18,793 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 15:19:18,793 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 15:19:18,793 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 15:19:18,793 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 15:19:18,793 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 15:19:18,793 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 15:19:18,793 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 15:19:19,050 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 15:19:19,050 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 15:19:19,620 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 15:19:19,620 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 15:19:19,620 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:19:19 BoogieIcfgContainer [2018-11-23 15:19:19,621 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 15:19:19,621 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 15:19:19,621 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 15:19:19,623 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 15:19:19,624 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:19:18" (1/3) ... [2018-11-23 15:19:19,624 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@769486c9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:19:19, skipping insertion in model container [2018-11-23 15:19:19,624 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:18" (2/3) ... [2018-11-23 15:19:19,625 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@769486c9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:19:19, skipping insertion in model container [2018-11-23 15:19:19,625 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:19:19" (3/3) ... [2018-11-23 15:19:19,626 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 15:19:19,634 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 15:19:19,640 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 15:19:19,652 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 15:19:19,678 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 15:19:19,678 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 15:19:19,678 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 15:19:19,678 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 15:19:19,679 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 15:19:19,679 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 15:19:19,679 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 15:19:19,679 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 15:19:19,695 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states. [2018-11-23 15:19:19,703 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 15:19:19,703 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:19,704 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:19,706 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:19,710 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:19,710 INFO L82 PathProgramCache]: Analyzing trace with hash 291877897, now seen corresponding path program 1 times [2018-11-23 15:19:19,712 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:19,752 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:19,752 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:19,753 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:19,753 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:19,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:19,989 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:19,990 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:19,991 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:19,991 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:19,995 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:20,004 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:20,005 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:20,007 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 4 states. [2018-11-23 15:19:20,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:20,347 INFO L93 Difference]: Finished difference Result 327 states and 541 transitions. [2018-11-23 15:19:20,347 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:20,349 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 51 [2018-11-23 15:19:20,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:20,358 INFO L225 Difference]: With dead ends: 327 [2018-11-23 15:19:20,358 INFO L226 Difference]: Without dead ends: 166 [2018-11-23 15:19:20,362 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:20,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2018-11-23 15:19:20,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 149. [2018-11-23 15:19:20,401 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 15:19:20,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 225 transitions. [2018-11-23 15:19:20,405 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 225 transitions. Word has length 51 [2018-11-23 15:19:20,405 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:20,406 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 225 transitions. [2018-11-23 15:19:20,406 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:20,406 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 225 transitions. [2018-11-23 15:19:20,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 15:19:20,408 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:20,408 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:20,409 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:20,409 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:20,409 INFO L82 PathProgramCache]: Analyzing trace with hash -1997725402, now seen corresponding path program 1 times [2018-11-23 15:19:20,409 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:20,411 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:20,411 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:20,411 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:20,412 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:20,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:20,541 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:20,541 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:20,541 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:20,541 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:20,543 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:20,543 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:20,543 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:20,543 INFO L87 Difference]: Start difference. First operand 149 states and 225 transitions. Second operand 4 states. [2018-11-23 15:19:20,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:20,791 INFO L93 Difference]: Finished difference Result 290 states and 435 transitions. [2018-11-23 15:19:20,792 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:20,792 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 64 [2018-11-23 15:19:20,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:20,793 INFO L225 Difference]: With dead ends: 290 [2018-11-23 15:19:20,794 INFO L226 Difference]: Without dead ends: 166 [2018-11-23 15:19:20,795 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:20,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2018-11-23 15:19:20,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 149. [2018-11-23 15:19:20,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 15:19:20,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 224 transitions. [2018-11-23 15:19:20,805 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 224 transitions. Word has length 64 [2018-11-23 15:19:20,805 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:20,805 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 224 transitions. [2018-11-23 15:19:20,805 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:20,805 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 224 transitions. [2018-11-23 15:19:20,809 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 15:19:20,809 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:20,809 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:20,809 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:20,810 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:20,810 INFO L82 PathProgramCache]: Analyzing trace with hash -111586923, now seen corresponding path program 1 times [2018-11-23 15:19:20,810 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:20,811 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:20,812 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:20,812 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:20,812 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:20,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:20,904 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:20,904 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:20,904 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:20,904 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:20,904 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:20,905 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:20,905 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:20,905 INFO L87 Difference]: Start difference. First operand 149 states and 224 transitions. Second operand 4 states. [2018-11-23 15:19:21,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:21,123 INFO L93 Difference]: Finished difference Result 288 states and 432 transitions. [2018-11-23 15:19:21,124 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:21,124 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 15:19:21,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:21,126 INFO L225 Difference]: With dead ends: 288 [2018-11-23 15:19:21,126 INFO L226 Difference]: Without dead ends: 164 [2018-11-23 15:19:21,127 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:21,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164 states. [2018-11-23 15:19:21,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164 to 149. [2018-11-23 15:19:21,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 15:19:21,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 223 transitions. [2018-11-23 15:19:21,144 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 223 transitions. Word has length 65 [2018-11-23 15:19:21,144 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:21,144 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 223 transitions. [2018-11-23 15:19:21,145 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:21,145 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 223 transitions. [2018-11-23 15:19:21,146 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 15:19:21,146 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:21,147 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:21,147 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:21,147 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:21,147 INFO L82 PathProgramCache]: Analyzing trace with hash -1405721958, now seen corresponding path program 1 times [2018-11-23 15:19:21,147 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:21,149 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:21,149 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:21,149 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:21,149 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:21,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:21,241 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:21,241 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:21,241 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:21,241 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:21,242 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:21,242 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:21,242 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:21,242 INFO L87 Difference]: Start difference. First operand 149 states and 223 transitions. Second operand 4 states. [2018-11-23 15:19:21,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:21,474 INFO L93 Difference]: Finished difference Result 287 states and 430 transitions. [2018-11-23 15:19:21,475 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:21,475 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 15:19:21,475 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:21,476 INFO L225 Difference]: With dead ends: 287 [2018-11-23 15:19:21,476 INFO L226 Difference]: Without dead ends: 163 [2018-11-23 15:19:21,476 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:21,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2018-11-23 15:19:21,482 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 149. [2018-11-23 15:19:21,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 15:19:21,483 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 222 transitions. [2018-11-23 15:19:21,483 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 222 transitions. Word has length 65 [2018-11-23 15:19:21,483 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:21,483 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 222 transitions. [2018-11-23 15:19:21,484 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:21,484 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 222 transitions. [2018-11-23 15:19:21,485 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 15:19:21,485 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:21,485 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:21,485 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:21,485 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:21,486 INFO L82 PathProgramCache]: Analyzing trace with hash 68242562, now seen corresponding path program 1 times [2018-11-23 15:19:21,486 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:21,487 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:21,487 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:21,487 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:21,487 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:21,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:21,552 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:21,552 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:21,552 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:21,552 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:21,553 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:21,553 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:21,553 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:21,553 INFO L87 Difference]: Start difference. First operand 149 states and 222 transitions. Second operand 4 states. [2018-11-23 15:19:21,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:21,725 INFO L93 Difference]: Finished difference Result 287 states and 429 transitions. [2018-11-23 15:19:21,725 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:21,726 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 15:19:21,726 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:21,726 INFO L225 Difference]: With dead ends: 287 [2018-11-23 15:19:21,726 INFO L226 Difference]: Without dead ends: 163 [2018-11-23 15:19:21,727 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:21,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2018-11-23 15:19:21,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 149. [2018-11-23 15:19:21,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 15:19:21,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 221 transitions. [2018-11-23 15:19:21,734 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 221 transitions. Word has length 66 [2018-11-23 15:19:21,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:21,735 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 221 transitions. [2018-11-23 15:19:21,735 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:21,735 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 221 transitions. [2018-11-23 15:19:21,735 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 15:19:21,736 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:21,736 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:21,736 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:21,736 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:21,736 INFO L82 PathProgramCache]: Analyzing trace with hash -140287594, now seen corresponding path program 1 times [2018-11-23 15:19:21,736 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:21,738 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:21,738 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:21,738 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:21,738 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:21,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:21,822 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:21,822 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:21,822 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:21,822 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:21,823 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:21,823 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:21,823 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:21,823 INFO L87 Difference]: Start difference. First operand 149 states and 221 transitions. Second operand 4 states. [2018-11-23 15:19:22,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:22,052 INFO L93 Difference]: Finished difference Result 286 states and 427 transitions. [2018-11-23 15:19:22,052 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:22,052 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 15:19:22,053 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:22,054 INFO L225 Difference]: With dead ends: 286 [2018-11-23 15:19:22,054 INFO L226 Difference]: Without dead ends: 162 [2018-11-23 15:19:22,054 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:22,055 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2018-11-23 15:19:22,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 149. [2018-11-23 15:19:22,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 15:19:22,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 220 transitions. [2018-11-23 15:19:22,062 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 220 transitions. Word has length 66 [2018-11-23 15:19:22,062 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:22,062 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 220 transitions. [2018-11-23 15:19:22,062 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:22,062 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 220 transitions. [2018-11-23 15:19:22,063 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-23 15:19:22,063 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:22,063 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:22,063 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:22,064 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:22,064 INFO L82 PathProgramCache]: Analyzing trace with hash 13987441, now seen corresponding path program 1 times [2018-11-23 15:19:22,064 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:22,065 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:22,065 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:22,065 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:22,065 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:22,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:22,128 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:22,128 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:22,129 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:22,129 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:22,129 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:22,129 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:22,129 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:22,130 INFO L87 Difference]: Start difference. First operand 149 states and 220 transitions. Second operand 4 states. [2018-11-23 15:19:22,361 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:22,361 INFO L93 Difference]: Finished difference Result 286 states and 426 transitions. [2018-11-23 15:19:22,362 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:22,362 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-23 15:19:22,362 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:22,363 INFO L225 Difference]: With dead ends: 286 [2018-11-23 15:19:22,363 INFO L226 Difference]: Without dead ends: 162 [2018-11-23 15:19:22,363 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:22,364 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2018-11-23 15:19:22,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 149. [2018-11-23 15:19:22,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 15:19:22,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 219 transitions. [2018-11-23 15:19:22,369 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 219 transitions. Word has length 67 [2018-11-23 15:19:22,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:22,369 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 219 transitions. [2018-11-23 15:19:22,369 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:22,369 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 219 transitions. [2018-11-23 15:19:22,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 15:19:22,370 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:22,370 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:22,370 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:22,371 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:22,371 INFO L82 PathProgramCache]: Analyzing trace with hash -51019519, now seen corresponding path program 1 times [2018-11-23 15:19:22,371 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:22,372 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:22,372 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:22,372 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:22,372 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:22,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:22,437 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:22,438 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:22,438 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:22,438 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:22,438 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:22,438 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:22,439 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:22,439 INFO L87 Difference]: Start difference. First operand 149 states and 219 transitions. Second operand 4 states. [2018-11-23 15:19:22,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:22,636 INFO L93 Difference]: Finished difference Result 316 states and 474 transitions. [2018-11-23 15:19:22,637 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:22,637 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 15:19:22,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:22,638 INFO L225 Difference]: With dead ends: 316 [2018-11-23 15:19:22,638 INFO L226 Difference]: Without dead ends: 192 [2018-11-23 15:19:22,639 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:22,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2018-11-23 15:19:22,643 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 171. [2018-11-23 15:19:22,643 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 15:19:22,644 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 257 transitions. [2018-11-23 15:19:22,644 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 257 transitions. Word has length 68 [2018-11-23 15:19:22,644 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:22,644 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 257 transitions. [2018-11-23 15:19:22,645 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:22,645 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 257 transitions. [2018-11-23 15:19:22,645 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 15:19:22,645 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:22,646 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:22,646 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:22,646 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:22,646 INFO L82 PathProgramCache]: Analyzing trace with hash 1424345341, now seen corresponding path program 1 times [2018-11-23 15:19:22,646 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:22,649 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:22,649 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:22,649 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:22,649 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:22,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:22,719 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:22,719 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:22,720 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:22,720 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:22,720 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:22,720 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:22,720 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:22,721 INFO L87 Difference]: Start difference. First operand 171 states and 257 transitions. Second operand 4 states. [2018-11-23 15:19:22,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:22,926 INFO L93 Difference]: Finished difference Result 330 states and 501 transitions. [2018-11-23 15:19:22,926 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:22,927 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 15:19:22,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:22,928 INFO L225 Difference]: With dead ends: 330 [2018-11-23 15:19:22,928 INFO L226 Difference]: Without dead ends: 184 [2018-11-23 15:19:22,928 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:22,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2018-11-23 15:19:22,932 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 171. [2018-11-23 15:19:22,932 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 15:19:22,933 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 256 transitions. [2018-11-23 15:19:22,933 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 256 transitions. Word has length 68 [2018-11-23 15:19:22,934 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:22,934 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 256 transitions. [2018-11-23 15:19:22,934 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:22,934 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 256 transitions. [2018-11-23 15:19:22,934 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 15:19:22,935 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:22,935 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:22,935 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:22,935 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:22,935 INFO L82 PathProgramCache]: Analyzing trace with hash 993066636, now seen corresponding path program 1 times [2018-11-23 15:19:22,935 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:22,936 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:22,937 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:22,937 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:22,937 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:22,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:22,997 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:22,997 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:22,997 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:22,998 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:22,998 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:22,998 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:22,998 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:22,998 INFO L87 Difference]: Start difference. First operand 171 states and 256 transitions. Second operand 4 states. [2018-11-23 15:19:23,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:23,136 INFO L93 Difference]: Finished difference Result 320 states and 487 transitions. [2018-11-23 15:19:23,136 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:23,136 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 69 [2018-11-23 15:19:23,136 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:23,137 INFO L225 Difference]: With dead ends: 320 [2018-11-23 15:19:23,137 INFO L226 Difference]: Without dead ends: 174 [2018-11-23 15:19:23,137 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:23,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2018-11-23 15:19:23,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 171. [2018-11-23 15:19:23,142 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 15:19:23,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 255 transitions. [2018-11-23 15:19:23,143 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 255 transitions. Word has length 69 [2018-11-23 15:19:23,144 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:23,144 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 255 transitions. [2018-11-23 15:19:23,144 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:23,144 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 255 transitions. [2018-11-23 15:19:23,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 15:19:23,145 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:23,145 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:23,145 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:23,145 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:23,145 INFO L82 PathProgramCache]: Analyzing trace with hash -1455151314, now seen corresponding path program 1 times [2018-11-23 15:19:23,145 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:23,146 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:23,146 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:23,147 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:23,147 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:23,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:23,206 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:23,207 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:23,207 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:23,207 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:23,207 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:23,208 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:23,208 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:23,208 INFO L87 Difference]: Start difference. First operand 171 states and 255 transitions. Second operand 4 states. [2018-11-23 15:19:23,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:23,411 INFO L93 Difference]: Finished difference Result 338 states and 509 transitions. [2018-11-23 15:19:23,411 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:23,412 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 15:19:23,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:23,413 INFO L225 Difference]: With dead ends: 338 [2018-11-23 15:19:23,413 INFO L226 Difference]: Without dead ends: 192 [2018-11-23 15:19:23,413 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:23,414 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2018-11-23 15:19:23,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 171. [2018-11-23 15:19:23,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 15:19:23,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 254 transitions. [2018-11-23 15:19:23,419 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 254 transitions. Word has length 81 [2018-11-23 15:19:23,419 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:23,419 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 254 transitions. [2018-11-23 15:19:23,419 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:23,419 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 254 transitions. [2018-11-23 15:19:23,420 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-23 15:19:23,420 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:23,420 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:23,420 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:23,420 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:23,421 INFO L82 PathProgramCache]: Analyzing trace with hash -471659379, now seen corresponding path program 1 times [2018-11-23 15:19:23,421 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:23,422 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:23,422 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:23,422 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:23,422 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:23,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:23,477 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:23,478 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:23,478 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:23,478 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:23,478 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:23,478 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:23,478 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:23,479 INFO L87 Difference]: Start difference. First operand 171 states and 254 transitions. Second operand 4 states. [2018-11-23 15:19:23,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:23,624 INFO L93 Difference]: Finished difference Result 336 states and 505 transitions. [2018-11-23 15:19:23,624 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:23,625 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 15:19:23,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:23,625 INFO L225 Difference]: With dead ends: 336 [2018-11-23 15:19:23,625 INFO L226 Difference]: Without dead ends: 190 [2018-11-23 15:19:23,626 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:23,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 190 states. [2018-11-23 15:19:23,628 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 190 to 171. [2018-11-23 15:19:23,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 15:19:23,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 253 transitions. [2018-11-23 15:19:23,629 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 253 transitions. Word has length 82 [2018-11-23 15:19:23,629 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:23,629 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 253 transitions. [2018-11-23 15:19:23,629 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:23,629 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 253 transitions. [2018-11-23 15:19:23,630 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-23 15:19:23,630 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:23,630 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:23,630 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:23,630 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:23,631 INFO L82 PathProgramCache]: Analyzing trace with hash -1765794414, now seen corresponding path program 1 times [2018-11-23 15:19:23,631 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:23,631 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:23,632 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:23,632 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:23,632 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:23,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:23,660 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:23,660 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:23,660 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:23,661 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:23,661 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:23,661 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:23,661 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:23,661 INFO L87 Difference]: Start difference. First operand 171 states and 253 transitions. Second operand 4 states. [2018-11-23 15:19:23,805 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:23,805 INFO L93 Difference]: Finished difference Result 335 states and 502 transitions. [2018-11-23 15:19:23,806 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:23,806 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 15:19:23,806 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:23,807 INFO L225 Difference]: With dead ends: 335 [2018-11-23 15:19:23,807 INFO L226 Difference]: Without dead ends: 189 [2018-11-23 15:19:23,807 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:23,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 189 states. [2018-11-23 15:19:23,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 189 to 171. [2018-11-23 15:19:23,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 15:19:23,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 252 transitions. [2018-11-23 15:19:23,811 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 252 transitions. Word has length 82 [2018-11-23 15:19:23,812 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:23,812 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 252 transitions. [2018-11-23 15:19:23,812 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:23,812 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 252 transitions. [2018-11-23 15:19:23,813 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-23 15:19:23,813 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:23,813 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:23,813 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:23,813 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:23,813 INFO L82 PathProgramCache]: Analyzing trace with hash 1790898314, now seen corresponding path program 1 times [2018-11-23 15:19:23,813 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:23,814 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:23,814 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:23,814 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:23,814 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:23,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:23,848 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-23 15:19:23,848 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:23,848 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:23,848 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:23,849 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:23,849 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:23,849 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:23,849 INFO L87 Difference]: Start difference. First operand 171 states and 252 transitions. Second operand 4 states. [2018-11-23 15:19:23,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:23,996 INFO L93 Difference]: Finished difference Result 346 states and 519 transitions. [2018-11-23 15:19:23,997 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:23,997 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-23 15:19:23,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:23,998 INFO L225 Difference]: With dead ends: 346 [2018-11-23 15:19:23,998 INFO L226 Difference]: Without dead ends: 200 [2018-11-23 15:19:23,998 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:23,998 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2018-11-23 15:19:24,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 187. [2018-11-23 15:19:24,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 187 states. [2018-11-23 15:19:24,002 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 278 transitions. [2018-11-23 15:19:24,002 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 278 transitions. Word has length 83 [2018-11-23 15:19:24,002 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:24,002 INFO L480 AbstractCegarLoop]: Abstraction has 187 states and 278 transitions. [2018-11-23 15:19:24,002 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:24,002 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 278 transitions. [2018-11-23 15:19:24,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-23 15:19:24,003 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:24,003 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:24,003 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:24,003 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:24,003 INFO L82 PathProgramCache]: Analyzing trace with hash 765876923, now seen corresponding path program 1 times [2018-11-23 15:19:24,004 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:24,004 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:24,005 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:24,005 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:24,005 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:24,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:24,046 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:24,046 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:24,047 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:24,047 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:24,047 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:24,047 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:24,047 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:24,047 INFO L87 Difference]: Start difference. First operand 187 states and 278 transitions. Second operand 4 states. [2018-11-23 15:19:24,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:24,194 INFO L93 Difference]: Finished difference Result 367 states and 552 transitions. [2018-11-23 15:19:24,194 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:24,194 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-23 15:19:24,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:24,195 INFO L225 Difference]: With dead ends: 367 [2018-11-23 15:19:24,195 INFO L226 Difference]: Without dead ends: 205 [2018-11-23 15:19:24,196 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:24,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2018-11-23 15:19:24,199 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 187. [2018-11-23 15:19:24,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 187 states. [2018-11-23 15:19:24,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 277 transitions. [2018-11-23 15:19:24,200 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 277 transitions. Word has length 84 [2018-11-23 15:19:24,200 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:24,200 INFO L480 AbstractCegarLoop]: Abstraction has 187 states and 277 transitions. [2018-11-23 15:19:24,200 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:24,200 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 277 transitions. [2018-11-23 15:19:24,201 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-23 15:19:24,201 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:24,201 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:24,201 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:24,201 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:24,201 INFO L82 PathProgramCache]: Analyzing trace with hash -1403590617, now seen corresponding path program 1 times [2018-11-23 15:19:24,201 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:24,202 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:24,202 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:24,202 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:24,202 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:24,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:24,243 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 15:19:24,243 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:24,243 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 15:19:24,243 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:24,244 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 15:19:24,244 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 15:19:24,244 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:24,244 INFO L87 Difference]: Start difference. First operand 187 states and 277 transitions. Second operand 5 states. [2018-11-23 15:19:24,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:24,456 INFO L93 Difference]: Finished difference Result 358 states and 538 transitions. [2018-11-23 15:19:24,456 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 15:19:24,456 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 84 [2018-11-23 15:19:24,456 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:24,457 INFO L225 Difference]: With dead ends: 358 [2018-11-23 15:19:24,457 INFO L226 Difference]: Without dead ends: 196 [2018-11-23 15:19:24,457 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-23 15:19:24,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 196 states. [2018-11-23 15:19:24,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 196 to 196. [2018-11-23 15:19:24,460 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2018-11-23 15:19:24,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 288 transitions. [2018-11-23 15:19:24,461 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 288 transitions. Word has length 84 [2018-11-23 15:19:24,461 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:24,461 INFO L480 AbstractCegarLoop]: Abstraction has 196 states and 288 transitions. [2018-11-23 15:19:24,461 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 15:19:24,461 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 288 transitions. [2018-11-23 15:19:24,462 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2018-11-23 15:19:24,462 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:24,462 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:24,462 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:24,462 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:24,462 INFO L82 PathProgramCache]: Analyzing trace with hash -868983876, now seen corresponding path program 1 times [2018-11-23 15:19:24,462 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:24,463 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:24,463 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:24,463 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:24,463 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:24,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:24,504 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:24,504 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:24,504 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:24,504 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:24,504 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:24,505 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:24,505 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:24,505 INFO L87 Difference]: Start difference. First operand 196 states and 288 transitions. Second operand 4 states. [2018-11-23 15:19:24,649 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:24,650 INFO L93 Difference]: Finished difference Result 394 states and 583 transitions. [2018-11-23 15:19:24,650 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:24,650 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-23 15:19:24,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:24,651 INFO L225 Difference]: With dead ends: 394 [2018-11-23 15:19:24,651 INFO L226 Difference]: Without dead ends: 223 [2018-11-23 15:19:24,652 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:24,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2018-11-23 15:19:24,655 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 196. [2018-11-23 15:19:24,655 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2018-11-23 15:19:24,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 287 transitions. [2018-11-23 15:19:24,656 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 287 transitions. Word has length 85 [2018-11-23 15:19:24,656 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:24,656 INFO L480 AbstractCegarLoop]: Abstraction has 196 states and 287 transitions. [2018-11-23 15:19:24,656 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:24,656 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 287 transitions. [2018-11-23 15:19:24,657 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2018-11-23 15:19:24,657 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:24,657 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:24,657 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:24,657 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:24,657 INFO L82 PathProgramCache]: Analyzing trace with hash 1360924576, now seen corresponding path program 1 times [2018-11-23 15:19:24,657 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:24,658 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:24,658 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:24,658 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:24,658 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:24,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:24,689 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:24,689 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:24,689 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:24,689 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:24,689 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:24,689 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:24,689 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:24,690 INFO L87 Difference]: Start difference. First operand 196 states and 287 transitions. Second operand 4 states. [2018-11-23 15:19:24,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:24,838 INFO L93 Difference]: Finished difference Result 394 states and 581 transitions. [2018-11-23 15:19:24,839 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:24,839 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 86 [2018-11-23 15:19:24,839 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:24,840 INFO L225 Difference]: With dead ends: 394 [2018-11-23 15:19:24,840 INFO L226 Difference]: Without dead ends: 223 [2018-11-23 15:19:24,841 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:24,841 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2018-11-23 15:19:24,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 196. [2018-11-23 15:19:24,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2018-11-23 15:19:24,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 286 transitions. [2018-11-23 15:19:24,845 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 286 transitions. Word has length 86 [2018-11-23 15:19:24,845 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:24,845 INFO L480 AbstractCegarLoop]: Abstraction has 196 states and 286 transitions. [2018-11-23 15:19:24,845 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:24,845 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 286 transitions. [2018-11-23 15:19:24,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2018-11-23 15:19:24,846 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:24,846 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:24,846 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:24,846 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:24,846 INFO L82 PathProgramCache]: Analyzing trace with hash -1155371775, now seen corresponding path program 1 times [2018-11-23 15:19:24,846 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:24,847 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:24,847 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:24,847 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:24,847 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:24,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:24,893 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:24,893 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:24,893 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:24,893 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:24,894 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:24,894 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:24,894 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:24,894 INFO L87 Difference]: Start difference. First operand 196 states and 286 transitions. Second operand 4 states. [2018-11-23 15:19:25,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:25,082 INFO L93 Difference]: Finished difference Result 384 states and 566 transitions. [2018-11-23 15:19:25,082 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:25,082 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 87 [2018-11-23 15:19:25,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:25,083 INFO L225 Difference]: With dead ends: 384 [2018-11-23 15:19:25,083 INFO L226 Difference]: Without dead ends: 213 [2018-11-23 15:19:25,084 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:25,084 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2018-11-23 15:19:25,087 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 196. [2018-11-23 15:19:25,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2018-11-23 15:19:25,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 285 transitions. [2018-11-23 15:19:25,088 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 285 transitions. Word has length 87 [2018-11-23 15:19:25,088 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:25,088 INFO L480 AbstractCegarLoop]: Abstraction has 196 states and 285 transitions. [2018-11-23 15:19:25,088 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:25,088 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 285 transitions. [2018-11-23 15:19:25,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 15:19:25,089 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:25,089 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:25,089 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:25,090 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:25,090 INFO L82 PathProgramCache]: Analyzing trace with hash -896304831, now seen corresponding path program 1 times [2018-11-23 15:19:25,090 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:25,091 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:25,091 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:25,091 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:25,091 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:25,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:25,147 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:25,147 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:25,147 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:25,147 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:25,147 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:25,148 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:25,148 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:25,148 INFO L87 Difference]: Start difference. First operand 196 states and 285 transitions. Second operand 4 states. [2018-11-23 15:19:25,365 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:25,365 INFO L93 Difference]: Finished difference Result 473 states and 703 transitions. [2018-11-23 15:19:25,366 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:25,366 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 15:19:25,366 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:25,367 INFO L225 Difference]: With dead ends: 473 [2018-11-23 15:19:25,367 INFO L226 Difference]: Without dead ends: 302 [2018-11-23 15:19:25,367 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:25,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 302 states. [2018-11-23 15:19:25,370 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 302 to 239. [2018-11-23 15:19:25,371 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 239 states. [2018-11-23 15:19:25,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 239 states to 239 states and 363 transitions. [2018-11-23 15:19:25,371 INFO L78 Accepts]: Start accepts. Automaton has 239 states and 363 transitions. Word has length 90 [2018-11-23 15:19:25,371 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:25,372 INFO L480 AbstractCegarLoop]: Abstraction has 239 states and 363 transitions. [2018-11-23 15:19:25,372 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:25,372 INFO L276 IsEmpty]: Start isEmpty. Operand 239 states and 363 transitions. [2018-11-23 15:19:25,372 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 15:19:25,372 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:25,372 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:25,373 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:25,373 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:25,373 INFO L82 PathProgramCache]: Analyzing trace with hash -1793698109, now seen corresponding path program 1 times [2018-11-23 15:19:25,373 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:25,374 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:25,374 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:25,374 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:25,374 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:25,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:25,411 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:25,411 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:25,411 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:25,411 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:25,411 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:25,412 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:25,412 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:25,412 INFO L87 Difference]: Start difference. First operand 239 states and 363 transitions. Second operand 4 states. [2018-11-23 15:19:25,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:25,590 INFO L93 Difference]: Finished difference Result 511 states and 784 transitions. [2018-11-23 15:19:25,591 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:25,591 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 15:19:25,591 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:25,592 INFO L225 Difference]: With dead ends: 511 [2018-11-23 15:19:25,592 INFO L226 Difference]: Without dead ends: 297 [2018-11-23 15:19:25,593 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:25,593 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2018-11-23 15:19:25,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 263. [2018-11-23 15:19:25,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:25,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 405 transitions. [2018-11-23 15:19:25,597 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 405 transitions. Word has length 90 [2018-11-23 15:19:25,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:25,598 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 405 transitions. [2018-11-23 15:19:25,598 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:25,598 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 405 transitions. [2018-11-23 15:19:25,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2018-11-23 15:19:25,598 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:25,599 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:25,599 INFO L423 AbstractCegarLoop]: === Iteration 22 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:25,599 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:25,599 INFO L82 PathProgramCache]: Analyzing trace with hash 1958988209, now seen corresponding path program 1 times [2018-11-23 15:19:25,599 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:25,600 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:25,600 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:25,600 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:25,600 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:25,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:25,642 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:25,642 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:25,643 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:25,643 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:25,643 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:25,643 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:25,643 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:25,643 INFO L87 Difference]: Start difference. First operand 263 states and 405 transitions. Second operand 4 states. [2018-11-23 15:19:25,820 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:25,820 INFO L93 Difference]: Finished difference Result 518 states and 804 transitions. [2018-11-23 15:19:25,821 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:25,821 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 15:19:25,822 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:25,822 INFO L225 Difference]: With dead ends: 518 [2018-11-23 15:19:25,822 INFO L226 Difference]: Without dead ends: 270 [2018-11-23 15:19:25,823 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 3 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:25,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2018-11-23 15:19:25,827 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 263. [2018-11-23 15:19:25,827 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:25,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 404 transitions. [2018-11-23 15:19:25,828 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 404 transitions. Word has length 96 [2018-11-23 15:19:25,828 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:25,828 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 404 transitions. [2018-11-23 15:19:25,828 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:25,828 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 404 transitions. [2018-11-23 15:19:25,829 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2018-11-23 15:19:25,829 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:25,829 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:25,829 INFO L423 AbstractCegarLoop]: === Iteration 23 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:25,829 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:25,829 INFO L82 PathProgramCache]: Analyzing trace with hash -175401234, now seen corresponding path program 1 times [2018-11-23 15:19:25,829 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:25,830 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:25,830 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:25,830 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:25,830 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:25,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:25,864 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:25,864 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:25,864 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:25,864 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:25,864 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:25,865 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:25,865 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:25,865 INFO L87 Difference]: Start difference. First operand 263 states and 404 transitions. Second operand 4 states. [2018-11-23 15:19:26,080 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:26,080 INFO L93 Difference]: Finished difference Result 564 states and 862 transitions. [2018-11-23 15:19:26,081 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:26,081 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 15:19:26,081 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:26,082 INFO L225 Difference]: With dead ends: 564 [2018-11-23 15:19:26,082 INFO L226 Difference]: Without dead ends: 326 [2018-11-23 15:19:26,082 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:26,083 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 326 states. [2018-11-23 15:19:26,086 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 326 to 263. [2018-11-23 15:19:26,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:26,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 403 transitions. [2018-11-23 15:19:26,088 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 403 transitions. Word has length 103 [2018-11-23 15:19:26,088 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:26,088 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 403 transitions. [2018-11-23 15:19:26,088 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:26,088 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 403 transitions. [2018-11-23 15:19:26,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2018-11-23 15:19:26,089 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:26,089 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:26,089 INFO L423 AbstractCegarLoop]: === Iteration 24 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:26,089 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:26,089 INFO L82 PathProgramCache]: Analyzing trace with hash -134726484, now seen corresponding path program 1 times [2018-11-23 15:19:26,089 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:26,090 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:26,090 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:26,090 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:26,090 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:26,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:26,145 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:26,145 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:26,145 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:26,145 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:26,145 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:26,146 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:26,146 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:26,146 INFO L87 Difference]: Start difference. First operand 263 states and 403 transitions. Second operand 4 states. [2018-11-23 15:19:26,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:26,321 INFO L93 Difference]: Finished difference Result 535 states and 821 transitions. [2018-11-23 15:19:26,321 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:26,321 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 15:19:26,321 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:26,322 INFO L225 Difference]: With dead ends: 535 [2018-11-23 15:19:26,322 INFO L226 Difference]: Without dead ends: 297 [2018-11-23 15:19:26,323 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:26,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2018-11-23 15:19:26,328 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 263. [2018-11-23 15:19:26,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:26,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 402 transitions. [2018-11-23 15:19:26,329 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 402 transitions. Word has length 103 [2018-11-23 15:19:26,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:26,329 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 402 transitions. [2018-11-23 15:19:26,329 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:26,329 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 402 transitions. [2018-11-23 15:19:26,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 15:19:26,330 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:26,330 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:26,331 INFO L423 AbstractCegarLoop]: === Iteration 25 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:26,331 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:26,331 INFO L82 PathProgramCache]: Analyzing trace with hash 545887437, now seen corresponding path program 1 times [2018-11-23 15:19:26,331 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:26,332 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:26,332 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:26,332 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:26,332 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:26,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:26,405 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:26,405 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:26,405 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:26,405 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:26,406 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:26,406 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:26,406 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:26,406 INFO L87 Difference]: Start difference. First operand 263 states and 402 transitions. Second operand 4 states. [2018-11-23 15:19:26,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:26,669 INFO L93 Difference]: Finished difference Result 562 states and 856 transitions. [2018-11-23 15:19:26,669 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:26,669 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 15:19:26,669 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:26,670 INFO L225 Difference]: With dead ends: 562 [2018-11-23 15:19:26,670 INFO L226 Difference]: Without dead ends: 324 [2018-11-23 15:19:26,671 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:26,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2018-11-23 15:19:26,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 263. [2018-11-23 15:19:26,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:26,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 401 transitions. [2018-11-23 15:19:26,677 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 401 transitions. Word has length 104 [2018-11-23 15:19:26,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:26,678 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 401 transitions. [2018-11-23 15:19:26,678 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:26,678 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 401 transitions. [2018-11-23 15:19:26,678 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 15:19:26,679 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:26,679 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:26,679 INFO L423 AbstractCegarLoop]: === Iteration 26 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:26,679 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:26,679 INFO L82 PathProgramCache]: Analyzing trace with hash -748247598, now seen corresponding path program 1 times [2018-11-23 15:19:26,679 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:26,680 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:26,680 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:26,680 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:26,680 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:26,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:26,759 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:26,759 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:26,760 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:26,760 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:26,760 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:26,760 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:26,760 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:26,760 INFO L87 Difference]: Start difference. First operand 263 states and 401 transitions. Second operand 4 states. [2018-11-23 15:19:27,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:27,026 INFO L93 Difference]: Finished difference Result 561 states and 853 transitions. [2018-11-23 15:19:27,027 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:27,027 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 15:19:27,027 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:27,028 INFO L225 Difference]: With dead ends: 561 [2018-11-23 15:19:27,028 INFO L226 Difference]: Without dead ends: 323 [2018-11-23 15:19:27,029 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:27,029 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2018-11-23 15:19:27,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 263. [2018-11-23 15:19:27,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:27,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 400 transitions. [2018-11-23 15:19:27,035 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 400 transitions. Word has length 104 [2018-11-23 15:19:27,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:27,035 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 400 transitions. [2018-11-23 15:19:27,035 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:27,035 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 400 transitions. [2018-11-23 15:19:27,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 15:19:27,036 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:27,036 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:27,036 INFO L423 AbstractCegarLoop]: === Iteration 27 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:27,037 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:27,037 INFO L82 PathProgramCache]: Analyzing trace with hash 1806804687, now seen corresponding path program 1 times [2018-11-23 15:19:27,037 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:27,037 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:27,037 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:27,038 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:27,038 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:27,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:27,087 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:27,087 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:27,087 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:27,087 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:27,088 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:27,088 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:27,088 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:27,088 INFO L87 Difference]: Start difference. First operand 263 states and 400 transitions. Second operand 4 states. [2018-11-23 15:19:27,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:27,270 INFO L93 Difference]: Finished difference Result 533 states and 813 transitions. [2018-11-23 15:19:27,270 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:27,270 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 15:19:27,271 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:27,271 INFO L225 Difference]: With dead ends: 533 [2018-11-23 15:19:27,271 INFO L226 Difference]: Without dead ends: 295 [2018-11-23 15:19:27,272 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:27,272 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2018-11-23 15:19:27,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 263. [2018-11-23 15:19:27,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:27,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 399 transitions. [2018-11-23 15:19:27,278 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 399 transitions. Word has length 104 [2018-11-23 15:19:27,278 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:27,278 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 399 transitions. [2018-11-23 15:19:27,278 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:27,278 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 399 transitions. [2018-11-23 15:19:27,279 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 15:19:27,279 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:27,279 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:27,279 INFO L423 AbstractCegarLoop]: === Iteration 28 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:27,279 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:27,279 INFO L82 PathProgramCache]: Analyzing trace with hash 512669652, now seen corresponding path program 1 times [2018-11-23 15:19:27,280 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:27,280 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:27,281 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:27,281 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:27,281 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:27,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:27,331 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:27,331 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:27,331 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:27,331 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:27,331 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:27,332 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:27,332 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:27,332 INFO L87 Difference]: Start difference. First operand 263 states and 399 transitions. Second operand 4 states. [2018-11-23 15:19:27,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:27,508 INFO L93 Difference]: Finished difference Result 532 states and 810 transitions. [2018-11-23 15:19:27,508 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:27,508 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 15:19:27,508 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:27,509 INFO L225 Difference]: With dead ends: 532 [2018-11-23 15:19:27,509 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 15:19:27,510 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:27,510 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 15:19:27,514 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 263. [2018-11-23 15:19:27,514 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:27,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 398 transitions. [2018-11-23 15:19:27,515 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 398 transitions. Word has length 104 [2018-11-23 15:19:27,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:27,515 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 398 transitions. [2018-11-23 15:19:27,516 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:27,516 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 398 transitions. [2018-11-23 15:19:27,516 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2018-11-23 15:19:27,516 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:27,516 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:27,517 INFO L423 AbstractCegarLoop]: === Iteration 29 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:27,517 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:27,517 INFO L82 PathProgramCache]: Analyzing trace with hash -624176389, now seen corresponding path program 1 times [2018-11-23 15:19:27,517 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:27,518 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:27,518 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:27,518 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:27,518 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:27,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:27,570 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:27,570 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:27,570 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:27,570 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:27,571 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:27,571 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:27,571 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:27,571 INFO L87 Difference]: Start difference. First operand 263 states and 398 transitions. Second operand 4 states. [2018-11-23 15:19:27,813 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:27,813 INFO L93 Difference]: Finished difference Result 561 states and 847 transitions. [2018-11-23 15:19:27,814 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:27,814 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 15:19:27,814 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:27,815 INFO L225 Difference]: With dead ends: 561 [2018-11-23 15:19:27,815 INFO L226 Difference]: Without dead ends: 323 [2018-11-23 15:19:27,816 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:27,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2018-11-23 15:19:27,821 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 263. [2018-11-23 15:19:27,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:27,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 397 transitions. [2018-11-23 15:19:27,822 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 397 transitions. Word has length 106 [2018-11-23 15:19:27,822 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:27,822 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 397 transitions. [2018-11-23 15:19:27,822 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:27,822 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 397 transitions. [2018-11-23 15:19:27,823 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2018-11-23 15:19:27,823 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:27,823 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:27,823 INFO L423 AbstractCegarLoop]: === Iteration 30 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:27,823 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:27,823 INFO L82 PathProgramCache]: Analyzing trace with hash -63476611, now seen corresponding path program 1 times [2018-11-23 15:19:27,823 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:27,824 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:27,824 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:27,824 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:27,824 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:27,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:27,873 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:27,873 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:27,873 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:27,873 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:27,873 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:27,874 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:27,874 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:27,874 INFO L87 Difference]: Start difference. First operand 263 states and 397 transitions. Second operand 4 states. [2018-11-23 15:19:28,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:28,107 INFO L93 Difference]: Finished difference Result 532 states and 806 transitions. [2018-11-23 15:19:28,107 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:28,107 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 15:19:28,107 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:28,108 INFO L225 Difference]: With dead ends: 532 [2018-11-23 15:19:28,108 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 15:19:28,109 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:28,109 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 15:19:28,114 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 263. [2018-11-23 15:19:28,114 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:28,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 396 transitions. [2018-11-23 15:19:28,115 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 396 transitions. Word has length 106 [2018-11-23 15:19:28,115 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:28,115 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 396 transitions. [2018-11-23 15:19:28,115 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:28,115 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 396 transitions. [2018-11-23 15:19:28,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2018-11-23 15:19:28,116 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:28,116 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:28,116 INFO L423 AbstractCegarLoop]: === Iteration 31 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:28,116 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:28,117 INFO L82 PathProgramCache]: Analyzing trace with hash -1010963588, now seen corresponding path program 1 times [2018-11-23 15:19:28,117 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:28,117 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:28,117 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:28,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:28,118 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:28,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:28,164 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:28,164 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:28,164 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:28,164 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:28,165 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:28,166 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:28,166 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:28,166 INFO L87 Difference]: Start difference. First operand 263 states and 396 transitions. Second operand 4 states. [2018-11-23 15:19:28,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:28,395 INFO L93 Difference]: Finished difference Result 561 states and 843 transitions. [2018-11-23 15:19:28,396 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:28,396 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 15:19:28,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:28,397 INFO L225 Difference]: With dead ends: 561 [2018-11-23 15:19:28,397 INFO L226 Difference]: Without dead ends: 323 [2018-11-23 15:19:28,397 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:28,398 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2018-11-23 15:19:28,401 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 263. [2018-11-23 15:19:28,401 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:28,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 395 transitions. [2018-11-23 15:19:28,402 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 395 transitions. Word has length 107 [2018-11-23 15:19:28,402 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:28,402 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 395 transitions. [2018-11-23 15:19:28,403 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:28,403 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 395 transitions. [2018-11-23 15:19:28,403 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2018-11-23 15:19:28,403 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:28,403 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:28,404 INFO L423 AbstractCegarLoop]: === Iteration 32 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:28,404 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:28,404 INFO L82 PathProgramCache]: Analyzing trace with hash -809139654, now seen corresponding path program 1 times [2018-11-23 15:19:28,404 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:28,405 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:28,405 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:28,405 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:28,405 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:28,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:28,438 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:28,438 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:28,439 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:28,439 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:28,439 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:28,439 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:28,439 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:28,439 INFO L87 Difference]: Start difference. First operand 263 states and 395 transitions. Second operand 4 states. [2018-11-23 15:19:28,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:28,591 INFO L93 Difference]: Finished difference Result 532 states and 802 transitions. [2018-11-23 15:19:28,592 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:28,592 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 15:19:28,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:28,593 INFO L225 Difference]: With dead ends: 532 [2018-11-23 15:19:28,593 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 15:19:28,594 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:28,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 15:19:28,601 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 263. [2018-11-23 15:19:28,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:28,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 394 transitions. [2018-11-23 15:19:28,602 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 394 transitions. Word has length 107 [2018-11-23 15:19:28,602 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:28,602 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 394 transitions. [2018-11-23 15:19:28,602 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:28,602 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 394 transitions. [2018-11-23 15:19:28,603 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2018-11-23 15:19:28,603 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:28,603 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:28,604 INFO L423 AbstractCegarLoop]: === Iteration 33 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:28,604 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:28,607 INFO L82 PathProgramCache]: Analyzing trace with hash 1254520800, now seen corresponding path program 1 times [2018-11-23 15:19:28,607 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:28,608 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:28,608 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:28,608 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:28,608 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:28,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:28,702 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:28,702 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:28,702 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:28,703 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:28,703 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:28,703 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:28,703 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:28,703 INFO L87 Difference]: Start difference. First operand 263 states and 394 transitions. Second operand 4 states. [2018-11-23 15:19:28,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:28,919 INFO L93 Difference]: Finished difference Result 561 states and 839 transitions. [2018-11-23 15:19:28,920 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:28,920 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 15:19:28,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:28,921 INFO L225 Difference]: With dead ends: 561 [2018-11-23 15:19:28,921 INFO L226 Difference]: Without dead ends: 323 [2018-11-23 15:19:28,921 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:28,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2018-11-23 15:19:28,925 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 263. [2018-11-23 15:19:28,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:28,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 393 transitions. [2018-11-23 15:19:28,926 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 393 transitions. Word has length 108 [2018-11-23 15:19:28,926 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:28,926 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 393 transitions. [2018-11-23 15:19:28,926 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:28,926 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 393 transitions. [2018-11-23 15:19:28,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2018-11-23 15:19:28,927 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:28,927 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:28,927 INFO L423 AbstractCegarLoop]: === Iteration 34 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:28,927 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:28,928 INFO L82 PathProgramCache]: Analyzing trace with hash -1078871838, now seen corresponding path program 1 times [2018-11-23 15:19:28,928 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:28,928 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:28,928 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:28,929 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:28,929 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:28,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:28,975 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:28,975 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:28,976 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:28,976 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:28,976 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:28,976 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:28,976 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:28,976 INFO L87 Difference]: Start difference. First operand 263 states and 393 transitions. Second operand 4 states. [2018-11-23 15:19:29,127 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:29,128 INFO L93 Difference]: Finished difference Result 532 states and 798 transitions. [2018-11-23 15:19:29,128 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:29,128 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 15:19:29,128 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:29,129 INFO L225 Difference]: With dead ends: 532 [2018-11-23 15:19:29,129 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 15:19:29,129 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:29,130 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 15:19:29,133 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 263. [2018-11-23 15:19:29,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:29,133 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 392 transitions. [2018-11-23 15:19:29,134 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 392 transitions. Word has length 108 [2018-11-23 15:19:29,134 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:29,134 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 392 transitions. [2018-11-23 15:19:29,134 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:29,134 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 392 transitions. [2018-11-23 15:19:29,135 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2018-11-23 15:19:29,135 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:29,135 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:29,135 INFO L423 AbstractCegarLoop]: === Iteration 35 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:29,135 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:29,135 INFO L82 PathProgramCache]: Analyzing trace with hash -158921535, now seen corresponding path program 1 times [2018-11-23 15:19:29,135 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:29,136 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:29,136 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:29,136 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:29,136 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:29,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:29,167 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:29,167 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:29,168 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:29,168 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:29,168 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:29,168 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:29,168 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:29,168 INFO L87 Difference]: Start difference. First operand 263 states and 392 transitions. Second operand 4 states. [2018-11-23 15:19:29,361 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:29,361 INFO L93 Difference]: Finished difference Result 551 states and 822 transitions. [2018-11-23 15:19:29,361 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:29,361 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 109 [2018-11-23 15:19:29,361 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:29,362 INFO L225 Difference]: With dead ends: 551 [2018-11-23 15:19:29,362 INFO L226 Difference]: Without dead ends: 313 [2018-11-23 15:19:29,363 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:29,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2018-11-23 15:19:29,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 263. [2018-11-23 15:19:29,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:29,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 391 transitions. [2018-11-23 15:19:29,369 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 391 transitions. Word has length 109 [2018-11-23 15:19:29,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:29,369 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 391 transitions. [2018-11-23 15:19:29,369 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:29,369 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 391 transitions. [2018-11-23 15:19:29,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2018-11-23 15:19:29,370 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:29,370 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:29,370 INFO L423 AbstractCegarLoop]: === Iteration 36 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:29,370 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:29,370 INFO L82 PathProgramCache]: Analyzing trace with hash 520350719, now seen corresponding path program 1 times [2018-11-23 15:19:29,370 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:29,371 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:29,371 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:29,371 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:29,371 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:29,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:29,426 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:29,426 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:29,426 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:29,426 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:29,426 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:29,427 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:29,427 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:29,427 INFO L87 Difference]: Start difference. First operand 263 states and 391 transitions. Second operand 4 states. [2018-11-23 15:19:29,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:29,572 INFO L93 Difference]: Finished difference Result 522 states and 781 transitions. [2018-11-23 15:19:29,572 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:29,572 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 109 [2018-11-23 15:19:29,572 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:29,573 INFO L225 Difference]: With dead ends: 522 [2018-11-23 15:19:29,573 INFO L226 Difference]: Without dead ends: 284 [2018-11-23 15:19:29,574 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:29,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 284 states. [2018-11-23 15:19:29,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 284 to 263. [2018-11-23 15:19:29,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:29,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 390 transitions. [2018-11-23 15:19:29,580 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 390 transitions. Word has length 109 [2018-11-23 15:19:29,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:29,580 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 390 transitions. [2018-11-23 15:19:29,580 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:29,580 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 390 transitions. [2018-11-23 15:19:29,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2018-11-23 15:19:29,581 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:29,581 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:29,581 INFO L423 AbstractCegarLoop]: === Iteration 37 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:29,581 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:29,581 INFO L82 PathProgramCache]: Analyzing trace with hash 813684885, now seen corresponding path program 1 times [2018-11-23 15:19:29,581 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:29,582 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:29,582 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:29,582 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:29,582 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:29,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:29,640 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 75 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:29,640 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:29,640 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 15:19:29,640 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:29,641 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 15:19:29,641 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 15:19:29,641 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 15:19:29,641 INFO L87 Difference]: Start difference. First operand 263 states and 390 transitions. Second operand 4 states. [2018-11-23 15:19:29,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:29,874 INFO L93 Difference]: Finished difference Result 551 states and 818 transitions. [2018-11-23 15:19:29,875 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 15:19:29,875 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 112 [2018-11-23 15:19:29,875 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:29,875 INFO L225 Difference]: With dead ends: 551 [2018-11-23 15:19:29,875 INFO L226 Difference]: Without dead ends: 313 [2018-11-23 15:19:29,876 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 15:19:29,876 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2018-11-23 15:19:29,879 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 263. [2018-11-23 15:19:29,879 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 15:19:29,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 389 transitions. [2018-11-23 15:19:29,880 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 389 transitions. Word has length 112 [2018-11-23 15:19:29,880 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:29,880 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 389 transitions. [2018-11-23 15:19:29,880 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 15:19:29,880 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 389 transitions. [2018-11-23 15:19:29,881 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2018-11-23 15:19:29,881 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:29,881 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:29,881 INFO L423 AbstractCegarLoop]: === Iteration 38 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:29,881 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:29,881 INFO L82 PathProgramCache]: Analyzing trace with hash -872494953, now seen corresponding path program 1 times [2018-11-23 15:19:29,881 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:29,882 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:29,882 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:29,882 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:29,882 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:29,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:29,916 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 56 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2018-11-23 15:19:29,917 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:29,917 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 15:19:29,917 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:29,917 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 15:19:29,917 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 15:19:29,917 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 15:19:29,918 INFO L87 Difference]: Start difference. First operand 263 states and 389 transitions. Second operand 3 states. [2018-11-23 15:19:29,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:29,945 INFO L93 Difference]: Finished difference Result 737 states and 1110 transitions. [2018-11-23 15:19:29,945 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 15:19:29,945 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 112 [2018-11-23 15:19:29,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:29,947 INFO L225 Difference]: With dead ends: 737 [2018-11-23 15:19:29,947 INFO L226 Difference]: Without dead ends: 499 [2018-11-23 15:19:29,947 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 15:19:29,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 499 states. [2018-11-23 15:19:29,953 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 499 to 499. [2018-11-23 15:19:29,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 499 states. [2018-11-23 15:19:29,954 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 499 states to 499 states and 746 transitions. [2018-11-23 15:19:29,954 INFO L78 Accepts]: Start accepts. Automaton has 499 states and 746 transitions. Word has length 112 [2018-11-23 15:19:29,954 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:29,954 INFO L480 AbstractCegarLoop]: Abstraction has 499 states and 746 transitions. [2018-11-23 15:19:29,954 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 15:19:29,954 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 746 transitions. [2018-11-23 15:19:29,955 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2018-11-23 15:19:29,955 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:29,955 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:29,956 INFO L423 AbstractCegarLoop]: === Iteration 39 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:29,956 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:29,956 INFO L82 PathProgramCache]: Analyzing trace with hash 398999817, now seen corresponding path program 1 times [2018-11-23 15:19:29,956 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:29,956 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:29,957 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:29,957 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:29,957 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:29,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:29,993 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 15:19:29,993 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:29,993 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 15:19:29,993 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 15:19:29,993 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 15:19:29,994 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 15:19:29,994 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 15:19:29,994 INFO L87 Difference]: Start difference. First operand 499 states and 746 transitions. Second operand 3 states. [2018-11-23 15:19:30,017 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:30,017 INFO L93 Difference]: Finished difference Result 973 states and 1464 transitions. [2018-11-23 15:19:30,017 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 15:19:30,018 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 131 [2018-11-23 15:19:30,018 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:30,019 INFO L225 Difference]: With dead ends: 973 [2018-11-23 15:19:30,019 INFO L226 Difference]: Without dead ends: 499 [2018-11-23 15:19:30,020 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 15:19:30,020 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 499 states. [2018-11-23 15:19:30,025 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 499 to 499. [2018-11-23 15:19:30,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 499 states. [2018-11-23 15:19:30,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 499 states to 499 states and 741 transitions. [2018-11-23 15:19:30,027 INFO L78 Accepts]: Start accepts. Automaton has 499 states and 741 transitions. Word has length 131 [2018-11-23 15:19:30,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:30,027 INFO L480 AbstractCegarLoop]: Abstraction has 499 states and 741 transitions. [2018-11-23 15:19:30,027 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 15:19:30,027 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 741 transitions. [2018-11-23 15:19:30,028 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2018-11-23 15:19:30,028 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:30,028 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:30,028 INFO L423 AbstractCegarLoop]: === Iteration 40 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:30,028 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:30,028 INFO L82 PathProgramCache]: Analyzing trace with hash -515907609, now seen corresponding path program 1 times [2018-11-23 15:19:30,029 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 15:19:30,029 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:30,029 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:30,029 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:19:30,029 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 15:19:30,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 15:19:30,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 15:19:30,151 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=24604, |#NULL.offset|=24596, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24596, |old(~#SSLv3_server_data~0.base)|=24589, |old(~#SSLv3_server_data~0.offset)|=24587, |old(~init~0)|=24608, |~#SSLv3_server_data~0.base|=24589, |~#SSLv3_server_data~0.offset|=24587, ~init~0=24608] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24596, |old(~#SSLv3_server_data~0.base)|=24589, |old(~#SSLv3_server_data~0.offset)|=24587, |old(~init~0)|=24608, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24596, |old(~#SSLv3_server_data~0.base)|=24589, |old(~#SSLv3_server_data~0.offset)|=24587, |old(~init~0)|=24608, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] RET #607#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [main_~s~0.base=24597, main_~s~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |main_#t~malloc3.base|=24597, |main_#t~malloc3.offset|=0, |main_#t~malloc4.base|=24601, |main_#t~malloc4.offset|=0, |main_#t~malloc5.base|=24610, |main_#t~malloc5.offset|=0, |main_#t~malloc6.base|=24579, |main_#t~malloc6.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=0, ssl3_accept_~cb~0.offset=0, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem14.base|=(- 1), |ssl3_accept_#t~mem14.offset|=2, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem17.base|=(- 2), |ssl3_accept_#t~mem17.offset|=3, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem20|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem21|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem23|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8464 == #t~mem27;havoc #t~mem27; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 == ~blastFlag~0;~blastFlag~0 := 1; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem128.base|=24601, |ssl3_accept_#t~mem128.offset|=0, |ssl3_accept_#t~mem129|=24616, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem20|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem21|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem23|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8496 == #t~mem30;havoc #t~mem30; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 1 == ~blastFlag~0;~blastFlag~0 := 2; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem68|=1, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem128.base|=24601, |ssl3_accept_#t~mem128.offset|=0, |ssl3_accept_#t~mem129|=24616, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem20|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem21|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem23|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem40|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem41|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem42|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem43|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem44|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem45|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem46|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem47|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem48|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem49|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8656 == #t~mem49;havoc #t~mem49; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, 836 + #t~mem117.offset, 4);call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, 172 + #t~mem116.offset, 4);havoc #t~mem116.base, #t~mem116.offset;havoc #t~mem118.base, #t~mem118.offset;havoc #t~mem117.base, #t~mem117.offset;assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647;~tmp___9~0 := #t~nondet119;havoc #t~nondet119; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 2 == ~blastFlag~0;~blastFlag~0 := 5; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~tmp___10~0 := #t~nondet121;havoc #t~nondet121; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___10~0); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem128.base|=24601, |ssl3_accept_#t~mem128.offset|=0, |ssl3_accept_#t~mem129|=24616, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem20|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem21|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem23|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem40|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem41|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem42|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem43|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem44|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem45|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem46|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem47|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem48|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem49|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem50|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem51|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8672 == #t~mem51;havoc #t~mem51; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(4 == ~blastFlag~0); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 5 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24604, #NULL.offset=24596, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24589, ~#SSLv3_server_data~0.offset=24587, ~init~0=24608] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); [L1074] call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24597, #t~malloc3.offset=0, #t~malloc4.base=24601, #t~malloc4.offset=0, #t~malloc5.base=24610, #t~malloc5.offset=0, #t~malloc6.base=24579, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24597, ~s~0.offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet13; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0, 0; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem14.base=-1, #t~mem14.offset=2, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114-L1118] assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296; [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4); [L1119] call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4); [L1119] havoc #t~mem16; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem17.base=-2, #t~mem17.offset=3, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129-L1133] assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume 8464 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320-L1324] assume 0 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325-L1329] assume !(~ret~0 <= 0); [L1330] ~got_new_session~0 := 1; [L1331] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1332] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171-L1653] assume 8496 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337-L1341] assume 1 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342-L1346] assume !(~ret~0 <= 0); [L1347] call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem68=1, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] assume 0 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171-L1653] assume !(8496 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174-L1652] assume !(8497 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177-L1651] assume !(8512 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180-L1650] assume !(8513 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183-L1649] assume !(8528 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186-L1648] assume !(8529 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189-L1647] assume !(8544 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192-L1646] assume !(8545 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195-L1645] assume !(8560 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198-L1644] assume !(8561 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201-L1643] assume !(8448 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204-L1642] assume !(8576 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207-L1641] assume !(8577 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210-L1640] assume !(8592 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213-L1639] assume !(8593 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216-L1638] assume !(8608 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219-L1637] assume !(8609 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222-L1636] assume !(8640 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225-L1635] assume !(8641 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228-L1634] assume 8656 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, 836 + #t~mem117.offset, 4); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, 172 + #t~mem116.offset, 4); [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554-L1559] assume !(0 == ~tmp___9~0); [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561-L1565] assume 2 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566-L1570] assume !(~ret~0 <= 0); [L1571] call write~int(8672, ~s.base, 52 + ~s.offset, 4); [L1572] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574-L1579] assume !(0 == ~tmp___10~0); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171-L1653] assume !(8496 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174-L1652] assume !(8497 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177-L1651] assume !(8512 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180-L1650] assume !(8513 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183-L1649] assume !(8528 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186-L1648] assume !(8529 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189-L1647] assume !(8544 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192-L1646] assume !(8545 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195-L1645] assume !(8560 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198-L1644] assume !(8561 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201-L1643] assume !(8448 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204-L1642] assume !(8576 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207-L1641] assume !(8577 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210-L1640] assume !(8592 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213-L1639] assume !(8593 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216-L1638] assume !(8608 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219-L1637] assume !(8609 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222-L1636] assume !(8640 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225-L1635] assume !(8641 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228-L1634] assume !(8656 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231-L1633] assume !(8657 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234-L1632] assume 8672 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584-L1592] assume !(4 == ~blastFlag~0); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587-L1591] assume 5 == ~blastFlag~0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24604, #NULL.offset=24596, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24589, ~#SSLv3_server_data~0.offset=24587, ~init~0=24608] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); [L1074] call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24597, #t~malloc3.offset=0, #t~malloc4.base=24601, #t~malloc4.offset=0, #t~malloc5.base=24610, #t~malloc5.offset=0, #t~malloc6.base=24579, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24597, ~s~0.offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet13; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0, 0; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem14.base=-1, #t~mem14.offset=2, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114-L1118] assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296; [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4); [L1119] call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4); [L1119] havoc #t~mem16; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem17.base=-2, #t~mem17.offset=3, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129-L1133] assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume 8464 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320-L1324] assume 0 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325-L1329] assume !(~ret~0 <= 0); [L1330] ~got_new_session~0 := 1; [L1331] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1332] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171-L1653] assume 8496 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337-L1341] assume 1 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342-L1346] assume !(~ret~0 <= 0); [L1347] call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem68=1, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] assume 0 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171-L1653] assume !(8496 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174-L1652] assume !(8497 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177-L1651] assume !(8512 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180-L1650] assume !(8513 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183-L1649] assume !(8528 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186-L1648] assume !(8529 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189-L1647] assume !(8544 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192-L1646] assume !(8545 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195-L1645] assume !(8560 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198-L1644] assume !(8561 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201-L1643] assume !(8448 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204-L1642] assume !(8576 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207-L1641] assume !(8577 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210-L1640] assume !(8592 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213-L1639] assume !(8593 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216-L1638] assume !(8608 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219-L1637] assume !(8609 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222-L1636] assume !(8640 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225-L1635] assume !(8641 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228-L1634] assume 8656 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, 836 + #t~mem117.offset, 4); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, 172 + #t~mem116.offset, 4); [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554-L1559] assume !(0 == ~tmp___9~0); [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561-L1565] assume 2 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566-L1570] assume !(~ret~0 <= 0); [L1571] call write~int(8672, ~s.base, 52 + ~s.offset, 4); [L1572] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574-L1579] assume !(0 == ~tmp___10~0); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171-L1653] assume !(8496 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174-L1652] assume !(8497 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177-L1651] assume !(8512 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180-L1650] assume !(8513 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183-L1649] assume !(8528 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186-L1648] assume !(8529 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189-L1647] assume !(8544 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192-L1646] assume !(8545 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195-L1645] assume !(8560 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198-L1644] assume !(8561 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201-L1643] assume !(8448 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204-L1642] assume !(8576 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207-L1641] assume !(8577 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210-L1640] assume !(8592 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213-L1639] assume !(8593 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216-L1638] assume !(8608 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219-L1637] assume !(8609 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222-L1636] assume !(8640 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225-L1635] assume !(8641 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228-L1634] assume !(8656 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231-L1633] assume !(8657 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234-L1632] assume 8672 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584-L1592] assume !(4 == ~blastFlag~0); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587-L1591] assume 5 == ~blastFlag~0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24596, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24589, ~#SSLv3_server_data~0!offset=24587, ~init~0=24608] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24597, #t~malloc3!offset=0, #t~malloc4!base=24601, #t~malloc4!offset=0, #t~malloc5!base=24610, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24597, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet13; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0, offset: 0 }; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem14!base=-1, #t~mem14!offset=2, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] FCALL call #t~mem16 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem16, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem16; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem17!base=-2, #t~mem17!offset=3, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] COND FALSE !(0 == (#t~mem17!base + #t~mem17!offset) % 4294967296) [L1129] havoc #t~mem17; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND TRUE 8464 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320] COND TRUE 0 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325] COND FALSE !(~ret~0 <= 0) [L1330] ~got_new_session~0 := 1; [L1331] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1332] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND TRUE 8496 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337] COND TRUE 1 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342] COND FALSE !(~ret~0 <= 0) [L1347] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem68=1, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] COND TRUE 0 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228] COND TRUE 8656 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: 836 + #t~mem117!offset }, 4); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: 172 + #t~mem116!offset }, 4); [L1552] havoc #t~mem116; [L1552] havoc #t~mem118; [L1552] havoc #t~mem117; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] COND FALSE !(0 == ~tmp___9~0) [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561] COND TRUE 2 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566] COND FALSE !(~ret~0 <= 0) [L1571] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1572] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228] COND FALSE !(8656 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231] COND FALSE !(8657 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234] COND TRUE 8672 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND FALSE !(4 == ~blastFlag~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587] COND TRUE 5 == ~blastFlag~0 VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24596, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24589, ~#SSLv3_server_data~0!offset=24587, ~init~0=24608] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24597, #t~malloc3!offset=0, #t~malloc4!base=24601, #t~malloc4!offset=0, #t~malloc5!base=24610, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24597, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet13; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0, offset: 0 }; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem14!base=-1, #t~mem14!offset=2, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] FCALL call #t~mem16 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem16, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem16; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem17!base=-2, #t~mem17!offset=3, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] COND FALSE !(0 == (#t~mem17!base + #t~mem17!offset) % 4294967296) [L1129] havoc #t~mem17; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND TRUE 8464 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320] COND TRUE 0 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325] COND FALSE !(~ret~0 <= 0) [L1330] ~got_new_session~0 := 1; [L1331] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1332] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND TRUE 8496 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337] COND TRUE 1 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342] COND FALSE !(~ret~0 <= 0) [L1347] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem68=1, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] COND TRUE 0 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228] COND TRUE 8656 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: 836 + #t~mem117!offset }, 4); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: 172 + #t~mem116!offset }, 4); [L1552] havoc #t~mem116; [L1552] havoc #t~mem118; [L1552] havoc #t~mem117; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] COND FALSE !(0 == ~tmp___9~0) [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561] COND TRUE 2 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566] COND FALSE !(~ret~0 <= 0) [L1571] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1572] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228] COND FALSE !(8656 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231] COND FALSE !(8657 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234] COND TRUE 8672 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND FALSE !(4 == ~blastFlag~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587] COND TRUE 5 == ~blastFlag~0 VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24596, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24589, ~#SSLv3_server_data~0!offset=24587, ~init~0=24608] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24597, #t~malloc3!offset=0, #t~malloc4!base=24601, #t~malloc4!offset=0, #t~malloc5!base=24610, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24597, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet13; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0, offset: 0 }; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem14!base=-1, #t~mem14!offset=2, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] FCALL call #t~mem16 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem16, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem16; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem17!base=-2, #t~mem17!offset=3, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] COND FALSE !(0 == (#t~mem17!base + #t~mem17!offset) % 4294967296) [L1129] havoc #t~mem17; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND TRUE 8464 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320] COND TRUE 0 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325] COND FALSE !(~ret~0 <= 0) [L1330] ~got_new_session~0 := 1; [L1331] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1332] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND TRUE 8496 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337] COND TRUE 1 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342] COND FALSE !(~ret~0 <= 0) [L1347] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem68=1, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] COND TRUE 0 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228] COND TRUE 8656 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: 836 + #t~mem117!offset }, 4); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: 172 + #t~mem116!offset }, 4); [L1552] havoc #t~mem116; [L1552] havoc #t~mem118; [L1552] havoc #t~mem117; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] COND FALSE !(0 == ~tmp___9~0) [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561] COND TRUE 2 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566] COND FALSE !(~ret~0 <= 0) [L1571] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1572] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228] COND FALSE !(8656 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231] COND FALSE !(8657 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234] COND TRUE 8672 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND FALSE !(4 == ~blastFlag~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587] COND TRUE 5 == ~blastFlag~0 VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- [2018-11-23 15:19:31,724 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24589 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 15:19:31,725 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24587 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24596, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24589, ~#SSLv3_server_data~0!offset=24587, ~init~0=24608] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24597, #t~malloc3!offset=0, #t~malloc4!base=24601, #t~malloc4!offset=0, #t~malloc5!base=24610, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24597, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet13; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0, offset: 0 }; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem14!base=-1, #t~mem14!offset=2, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] FCALL call #t~mem16 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem16, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem16; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem17!base=-2, #t~mem17!offset=3, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] COND FALSE !(0 == (#t~mem17!base + #t~mem17!offset) % 4294967296) [L1129] havoc #t~mem17; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND TRUE 8464 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320] COND TRUE 0 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325] COND FALSE !(~ret~0 <= 0) [L1330] ~got_new_session~0 := 1; [L1331] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1332] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND TRUE 8496 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337] COND TRUE 1 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342] COND FALSE !(~ret~0 <= 0) [L1347] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem68=1, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] COND TRUE 0 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228] COND TRUE 8656 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: 836 + #t~mem117!offset }, 4); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: 172 + #t~mem116!offset }, 4); [L1552] havoc #t~mem116; [L1552] havoc #t~mem118; [L1552] havoc #t~mem117; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] COND FALSE !(0 == ~tmp___9~0) [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561] COND TRUE 2 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566] COND FALSE !(~ret~0 <= 0) [L1571] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1572] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228] COND FALSE !(8656 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231] COND FALSE !(8657 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234] COND TRUE 8672 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND FALSE !(4 == ~blastFlag~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587] COND TRUE 5 == ~blastFlag~0 VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24608, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24588:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={24597:0}, malloc(sizeof(SSL_CTX))={24610:0}, malloc(sizeof(SSL_SESSION))={24579:0}, malloc(sizeof(struct ssl3_state_st))={24601:0}, s={24597:0}, SSLv3_server_data={24588:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={24597:0}, SSLv3_server_data={24588:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->info_callback={-1:2}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->cert={-2:3}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=0, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->hit=1, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 15:19:32,607 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:19:32 BoogieIcfgContainer [2018-11-23 15:19:32,607 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 15:19:32,607 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 15:19:32,607 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 15:19:32,608 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 15:19:32,611 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:19:19" (3/4) ... [2018-11-23 15:19:32,614 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 15:19:32,614 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 15:19:32,615 INFO L168 Benchmark]: Toolchain (without parser) took 14566.70 ms. Allocated memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: 500.7 MB). Free memory was 956.6 MB in the beginning and 1.5 GB in the end (delta: -524.1 MB). There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 15:19:32,616 INFO L168 Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 1.0 GB. Free memory is still 985.5 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 15:19:32,617 INFO L168 Benchmark]: CACSL2BoogieTranslator took 568.62 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 174.1 MB). Free memory was 956.6 MB in the beginning and 1.2 GB in the end (delta: -199.0 MB). Peak memory consumption was 43.7 MB. Max. memory is 11.5 GB. [2018-11-23 15:19:32,617 INFO L168 Benchmark]: Boogie Procedure Inliner took 36.11 ms. Allocated memory is still 1.2 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 3.3 MB). Peak memory consumption was 3.3 MB. Max. memory is 11.5 GB. [2018-11-23 15:19:32,618 INFO L168 Benchmark]: Boogie Preprocessor took 75.71 ms. Allocated memory is still 1.2 GB. Free memory was 1.2 GB in the beginning and 1.1 GB in the end (delta: 6.5 MB). Peak memory consumption was 6.5 MB. Max. memory is 11.5 GB. [2018-11-23 15:19:32,618 INFO L168 Benchmark]: RCFGBuilder took 889.79 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 82.7 MB). Peak memory consumption was 82.7 MB. Max. memory is 11.5 GB. [2018-11-23 15:19:32,619 INFO L168 Benchmark]: TraceAbstraction took 12985.80 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 326.6 MB). Free memory was 1.1 GB in the beginning and 1.5 GB in the end (delta: -417.6 MB). Peak memory consumption was 447.9 MB. Max. memory is 11.5 GB. [2018-11-23 15:19:32,619 INFO L168 Benchmark]: Witness Printer took 7.13 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 15:19:32,625 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21 ms. Allocated memory is still 1.0 GB. Free memory is still 985.5 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 568.62 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 174.1 MB). Free memory was 956.6 MB in the beginning and 1.2 GB in the end (delta: -199.0 MB). Peak memory consumption was 43.7 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 36.11 ms. Allocated memory is still 1.2 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 3.3 MB). Peak memory consumption was 3.3 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 75.71 ms. Allocated memory is still 1.2 GB. Free memory was 1.2 GB in the beginning and 1.1 GB in the end (delta: 6.5 MB). Peak memory consumption was 6.5 MB. Max. memory is 11.5 GB. * RCFGBuilder took 889.79 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 82.7 MB). Peak memory consumption was 82.7 MB. Max. memory is 11.5 GB. * TraceAbstraction took 12985.80 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 326.6 MB). Free memory was 1.1 GB in the beginning and 1.5 GB in the end (delta: -417.6 MB). Peak memory consumption was 447.9 MB. Max. memory is 11.5 GB. * Witness Printer took 7.13 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24589 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24587 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 1706]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseAnd at line 1120. Possible FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24608, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24588:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={24597:0}, malloc(sizeof(SSL_CTX))={24610:0}, malloc(sizeof(SSL_SESSION))={24579:0}, malloc(sizeof(struct ssl3_state_st))={24601:0}, s={24597:0}, SSLv3_server_data={24588:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={24597:0}, SSLv3_server_data={24588:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->info_callback={-1:2}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->cert={-2:3}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=0, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->hit=1, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 156 locations, 1 error locations. UNSAFE Result, 12.9s OverallTime, 40 OverallIterations, 4 TraceHistogramMax, 7.5s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 7924 SDtfs, 2064 SDslu, 11202 SDs, 0 SdLazy, 6766 SolverSat, 332 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 5.6s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 263 GetRequests, 78 SyntacticMatches, 74 SemanticMatches, 111 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=499occurred in iteration=38, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 39 MinimizatonAttempts, 1079 StatesRemovedByMinimization, 36 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 3648 NumberOfCodeBlocks, 3648 NumberOfCodeBlocksAsserted, 40 NumberOfCheckSat, 3477 ConstructedInterpolants, 0 QuantifiedInterpolants, 861723 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 39 InterpolantComputations, 39 PerfectInterpolantSequences, 1623/1623 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 15:19:34,711 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 15:19:34,712 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 15:19:34,720 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 15:19:34,721 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 15:19:34,721 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 15:19:34,722 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 15:19:34,724 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 15:19:34,725 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 15:19:34,725 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 15:19:34,726 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 15:19:34,726 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 15:19:34,727 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 15:19:34,728 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 15:19:34,728 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 15:19:34,729 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 15:19:34,730 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 15:19:34,731 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 15:19:34,733 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 15:19:34,734 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 15:19:34,735 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 15:19:34,735 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 15:19:34,738 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 15:19:34,738 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 15:19:34,738 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 15:19:34,739 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 15:19:34,739 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 15:19:34,740 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 15:19:34,741 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 15:19:34,742 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 15:19:34,742 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 15:19:34,742 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 15:19:34,742 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 15:19:34,743 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 15:19:34,743 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 15:19:34,744 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 15:19:34,744 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf [2018-11-23 15:19:34,755 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 15:19:34,755 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 15:19:34,756 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 15:19:34,756 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 15:19:34,756 INFO L133 SettingsManager]: * User list type=DISABLED [2018-11-23 15:19:34,757 INFO L131 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2018-11-23 15:19:34,757 INFO L133 SettingsManager]: * Explicit value domain=true [2018-11-23 15:19:34,757 INFO L133 SettingsManager]: * Octagon Domain=false [2018-11-23 15:19:34,757 INFO L133 SettingsManager]: * Abstract domain=CompoundDomain [2018-11-23 15:19:34,757 INFO L133 SettingsManager]: * Interval Domain=false [2018-11-23 15:19:34,758 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 15:19:34,758 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 15:19:34,758 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 15:19:34,758 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 15:19:34,758 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 15:19:34,759 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 15:19:34,759 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 15:19:34,759 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 15:19:34,759 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 15:19:34,759 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 15:19:34,759 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 15:19:34,760 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 15:19:34,760 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 15:19:34,760 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 15:19:34,762 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 15:19:34,762 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 15:19:34,762 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 15:19:34,762 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 15:19:34,762 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 15:19:34,762 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 15:19:34,762 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 15:19:34,763 INFO L133 SettingsManager]: * Trace refinement strategy=WALRUS [2018-11-23 15:19:34,763 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 15:19:34,763 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 15:19:34,763 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 15:19:34,763 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9c69768cb083538b139479bdbb35676eb3378c1b [2018-11-23 15:19:34,795 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 15:19:34,805 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 15:19:34,807 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 15:19:34,808 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 15:19:34,809 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 15:19:34,809 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/../../sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 15:19:34,853 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/data/1e0d67df9/9d51edc6ecdc43dc876083eb297863fd/FLAG46b343c6e [2018-11-23 15:19:35,239 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 15:19:35,239 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 15:19:35,253 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/data/1e0d67df9/9d51edc6ecdc43dc876083eb297863fd/FLAG46b343c6e [2018-11-23 15:19:35,261 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/data/1e0d67df9/9d51edc6ecdc43dc876083eb297863fd [2018-11-23 15:19:35,264 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 15:19:35,265 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 15:19:35,266 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 15:19:35,266 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 15:19:35,269 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 15:19:35,270 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:19:35" (1/1) ... [2018-11-23 15:19:35,272 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@30cef67 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35, skipping insertion in model container [2018-11-23 15:19:35,272 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:19:35" (1/1) ... [2018-11-23 15:19:35,280 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 15:19:35,325 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 15:19:35,620 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 15:19:35,631 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 15:19:35,759 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 15:19:35,775 INFO L195 MainTranslator]: Completed translation [2018-11-23 15:19:35,775 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35 WrapperNode [2018-11-23 15:19:35,775 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 15:19:35,776 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 15:19:35,776 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 15:19:35,776 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 15:19:35,781 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35" (1/1) ... [2018-11-23 15:19:35,799 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35" (1/1) ... [2018-11-23 15:19:35,806 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 15:19:35,806 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 15:19:35,807 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 15:19:35,807 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 15:19:35,813 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35" (1/1) ... [2018-11-23 15:19:35,813 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35" (1/1) ... [2018-11-23 15:19:35,819 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35" (1/1) ... [2018-11-23 15:19:35,820 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35" (1/1) ... [2018-11-23 15:19:35,856 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35" (1/1) ... [2018-11-23 15:19:35,864 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35" (1/1) ... [2018-11-23 15:19:35,867 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35" (1/1) ... [2018-11-23 15:19:35,872 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 15:19:35,872 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 15:19:35,872 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 15:19:35,873 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 15:19:35,873 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 15:19:35,916 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 15:19:35,916 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 15:19:35,916 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 15:19:35,916 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2018-11-23 15:19:35,916 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 15:19:35,916 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 15:19:35,917 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-23 15:19:35,917 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 15:19:35,917 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 15:19:35,917 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 15:19:35,917 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 15:19:35,917 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 15:19:35,917 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 15:19:35,917 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 15:19:35,918 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-23 15:19:36,212 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 15:19:36,212 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 15:19:38,015 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 15:19:38,015 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 15:19:38,015 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:19:38 BoogieIcfgContainer [2018-11-23 15:19:38,015 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 15:19:38,016 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 15:19:38,016 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 15:19:38,018 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 15:19:38,018 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:19:35" (1/3) ... [2018-11-23 15:19:38,019 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@457c27e3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:19:38, skipping insertion in model container [2018-11-23 15:19:38,019 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:19:35" (2/3) ... [2018-11-23 15:19:38,019 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@457c27e3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:19:38, skipping insertion in model container [2018-11-23 15:19:38,019 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:19:38" (3/3) ... [2018-11-23 15:19:38,021 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 15:19:38,029 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 15:19:38,036 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 15:19:38,047 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 15:19:38,066 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 15:19:38,067 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 15:19:38,067 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 15:19:38,067 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 15:19:38,067 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 15:19:38,067 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 15:19:38,067 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 15:19:38,067 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 15:19:38,068 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 15:19:38,080 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states. [2018-11-23 15:19:38,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 15:19:38,085 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:38,086 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:38,087 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:38,090 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:38,091 INFO L82 PathProgramCache]: Analyzing trace with hash 291877897, now seen corresponding path program 1 times [2018-11-23 15:19:38,095 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 15:19:38,096 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 15:19:38,115 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:38,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:38,231 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 15:19:38,265 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:38,265 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 15:19:38,269 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:38,270 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 15:19:38,273 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 15:19:38,283 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 15:19:38,283 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 15:19:38,285 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 3 states. [2018-11-23 15:19:38,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:38,363 INFO L93 Difference]: Finished difference Result 426 states and 712 transitions. [2018-11-23 15:19:38,364 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 15:19:38,365 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 51 [2018-11-23 15:19:38,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:38,374 INFO L225 Difference]: With dead ends: 426 [2018-11-23 15:19:38,374 INFO L226 Difference]: Without dead ends: 259 [2018-11-23 15:19:38,377 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 49 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 15:19:38,389 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2018-11-23 15:19:38,417 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 259. [2018-11-23 15:19:38,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 259 states. [2018-11-23 15:19:38,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 387 transitions. [2018-11-23 15:19:38,422 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 387 transitions. Word has length 51 [2018-11-23 15:19:38,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:38,422 INFO L480 AbstractCegarLoop]: Abstraction has 259 states and 387 transitions. [2018-11-23 15:19:38,423 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 15:19:38,423 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 387 transitions. [2018-11-23 15:19:38,425 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 15:19:38,426 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:38,426 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:38,426 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:38,426 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:38,426 INFO L82 PathProgramCache]: Analyzing trace with hash -51019519, now seen corresponding path program 1 times [2018-11-23 15:19:38,427 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 15:19:38,427 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 15:19:38,442 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:38,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:38,515 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 15:19:38,537 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:19:38,537 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 15:19:38,539 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:38,539 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 15:19:38,540 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 15:19:38,541 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 15:19:38,541 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 15:19:38,541 INFO L87 Difference]: Start difference. First operand 259 states and 387 transitions. Second operand 3 states. [2018-11-23 15:19:38,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:38,601 INFO L93 Difference]: Finished difference Result 502 states and 760 transitions. [2018-11-23 15:19:38,602 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 15:19:38,602 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 68 [2018-11-23 15:19:38,602 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:38,604 INFO L225 Difference]: With dead ends: 502 [2018-11-23 15:19:38,604 INFO L226 Difference]: Without dead ends: 378 [2018-11-23 15:19:38,606 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 15:19:38,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 378 states. [2018-11-23 15:19:38,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 378 to 378. [2018-11-23 15:19:38,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 378 states. [2018-11-23 15:19:38,625 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 378 states to 378 states and 565 transitions. [2018-11-23 15:19:38,625 INFO L78 Accepts]: Start accepts. Automaton has 378 states and 565 transitions. Word has length 68 [2018-11-23 15:19:38,626 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:38,626 INFO L480 AbstractCegarLoop]: Abstraction has 378 states and 565 transitions. [2018-11-23 15:19:38,626 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 15:19:38,626 INFO L276 IsEmpty]: Start isEmpty. Operand 378 states and 565 transitions. [2018-11-23 15:19:38,629 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 15:19:38,629 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:38,629 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:38,630 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:38,630 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:38,630 INFO L82 PathProgramCache]: Analyzing trace with hash -896304831, now seen corresponding path program 1 times [2018-11-23 15:19:38,631 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 15:19:38,631 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 15:19:38,655 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:38,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:38,734 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 15:19:38,749 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:19:38,749 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 15:19:38,751 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:38,751 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 15:19:38,752 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 15:19:38,752 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 15:19:38,752 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 15:19:38,752 INFO L87 Difference]: Start difference. First operand 378 states and 565 transitions. Second operand 3 states. [2018-11-23 15:19:38,803 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:38,803 INFO L93 Difference]: Finished difference Result 741 states and 1118 transitions. [2018-11-23 15:19:38,804 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 15:19:38,804 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 90 [2018-11-23 15:19:38,804 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:38,806 INFO L225 Difference]: With dead ends: 741 [2018-11-23 15:19:38,806 INFO L226 Difference]: Without dead ends: 498 [2018-11-23 15:19:38,807 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 89 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 15:19:38,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2018-11-23 15:19:38,825 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 498. [2018-11-23 15:19:38,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 498 states. [2018-11-23 15:19:38,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 498 states to 498 states and 745 transitions. [2018-11-23 15:19:38,827 INFO L78 Accepts]: Start accepts. Automaton has 498 states and 745 transitions. Word has length 90 [2018-11-23 15:19:38,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:38,828 INFO L480 AbstractCegarLoop]: Abstraction has 498 states and 745 transitions. [2018-11-23 15:19:38,828 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 15:19:38,828 INFO L276 IsEmpty]: Start isEmpty. Operand 498 states and 745 transitions. [2018-11-23 15:19:38,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2018-11-23 15:19:38,831 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:38,832 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:38,832 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:38,832 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:38,832 INFO L82 PathProgramCache]: Analyzing trace with hash 398999817, now seen corresponding path program 1 times [2018-11-23 15:19:38,833 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 15:19:38,833 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/cvc4nyu Starting monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 15:19:38,855 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:38,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:19:38,952 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 15:19:38,983 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 15:19:38,983 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 15:19:38,984 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:19:38,985 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 15:19:38,985 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 15:19:38,985 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 15:19:38,985 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 15:19:38,986 INFO L87 Difference]: Start difference. First operand 498 states and 745 transitions. Second operand 3 states. [2018-11-23 15:19:39,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:19:39,034 INFO L93 Difference]: Finished difference Result 858 states and 1288 transitions. [2018-11-23 15:19:39,035 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 15:19:39,035 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 131 [2018-11-23 15:19:39,035 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:19:39,036 INFO L225 Difference]: With dead ends: 858 [2018-11-23 15:19:39,037 INFO L226 Difference]: Without dead ends: 495 [2018-11-23 15:19:39,037 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 129 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 15:19:39,038 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 495 states. [2018-11-23 15:19:39,049 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 495 to 495. [2018-11-23 15:19:39,050 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 495 states. [2018-11-23 15:19:39,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 495 states to 495 states and 735 transitions. [2018-11-23 15:19:39,051 INFO L78 Accepts]: Start accepts. Automaton has 495 states and 735 transitions. Word has length 131 [2018-11-23 15:19:39,051 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:19:39,051 INFO L480 AbstractCegarLoop]: Abstraction has 495 states and 735 transitions. [2018-11-23 15:19:39,052 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 15:19:39,052 INFO L276 IsEmpty]: Start isEmpty. Operand 495 states and 735 transitions. [2018-11-23 15:19:39,054 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2018-11-23 15:19:39,054 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:19:39,054 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:19:39,054 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:19:39,054 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:19:39,055 INFO L82 PathProgramCache]: Analyzing trace with hash -515907609, now seen corresponding path program 1 times [2018-11-23 15:19:39,055 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 15:19:39,055 INFO L69 tionRefinementEngine]: Using refinement strategy WalrusRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/cvc4nyu Starting monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 15:19:39,087 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:19:39,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 15:19:40,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 15:19:40,364 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv0 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv0 32)] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] RET #607#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret139 := main(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32);call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [main_~s~0.base=(_ bv7 32), main_~s~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc3.base|=(_ bv7 32), |main_#t~malloc3.offset|=(_ bv0 32), |main_#t~malloc4.base|=(_ bv1 32), |main_#t~malloc4.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv3 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~malloc6.base|=(_ bv2 32), |main_#t~malloc6.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet13;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem14.base|=(_ bv0 32), |ssl3_accept_#t~mem14.offset|=(_ bv1 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset);havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem16; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem17.base|=(_ bv1 32), |ssl3_accept_#t~mem17.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset));havoc #t~mem17.base, #t~mem17.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8464bv32 == #t~mem27;havoc #t~mem27; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet66;havoc #t~nondet66; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem116; [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- [2018-11-23 15:19:40,895 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 15:19:40,896 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem116; [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1048578:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={7:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={1:0}, s={7:0}, SSLv3_server_data={1048578:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={7:0}, SSLv3_server_data={1048578:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->info_callback={0:1}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=0, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->hit=256, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 15:19:41,085 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:19:41 BoogieIcfgContainer [2018-11-23 15:19:41,085 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 15:19:41,085 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 15:19:41,085 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 15:19:41,086 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 15:19:41,086 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:19:38" (3/4) ... [2018-11-23 15:19:41,089 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv0 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv0 32)] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] RET #607#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret139 := main(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32);call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [main_~s~0.base=(_ bv7 32), main_~s~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc3.base|=(_ bv7 32), |main_#t~malloc3.offset|=(_ bv0 32), |main_#t~malloc4.base|=(_ bv1 32), |main_#t~malloc4.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv3 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~malloc6.base|=(_ bv2 32), |main_#t~malloc6.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet13;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem14.base|=(_ bv0 32), |ssl3_accept_#t~mem14.offset|=(_ bv1 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset);havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem16; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem17.base|=(_ bv1 32), |ssl3_accept_#t~mem17.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset));havoc #t~mem17.base, #t~mem17.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8464bv32 == #t~mem27;havoc #t~mem27; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet66;havoc #t~nondet66; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8496bv32 == #t~mem30;havoc #t~mem30; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet67;havoc #t~nondet67; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 1bv32 == ~blastFlag~0;~blastFlag~0 := 2bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem68|=(_ bv256 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != #t~mem68;havoc #t~mem68;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem38|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem39|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem40|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem41|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem42|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem43|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem44|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem45|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem46|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem47|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem48|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem49|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8656bv32 == #t~mem49;havoc #t~mem49; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32);call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32);havoc #t~mem116.base, #t~mem116.offset;havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem118.base, #t~mem118.offset;~tmp___9~0 := #t~nondet119;havoc #t~nondet119; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~tmp___9~0);~ret~0 := #t~nondet120;havoc #t~nondet120; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 2bv32 == ~blastFlag~0;~blastFlag~0 := 5bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32);~tmp___10~0 := #t~nondet121;havoc #t~nondet121; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~tmp___10~0); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem38|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem39|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem40|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem41|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem42|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem43|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem44|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem45|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem46|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem47|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem48|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem49|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8656bv32 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem50|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8657bv32 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem51|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8672bv32 == #t~mem51;havoc #t~mem51; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet122;havoc #t~nondet122; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(4bv32 == ~blastFlag~0); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 5bv32 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=0bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L1042] ~init~0 := 1bv32; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32); [L1043] call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); [L1074] call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc3.base=7bv32, #t~malloc3.offset=0bv32, #t~malloc4.base=1bv32, #t~malloc4.offset=0bv32, #t~malloc5.base=3bv32, #t~malloc5.offset=0bv32, #t~malloc6.base=2bv32, #t~malloc6.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32, ~s~0.base=7bv32, ~s~0.offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); [L1107] havoc #t~nondet13; [L1108] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0bv32, 0bv32; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem14.base=0bv32, #t~mem14.offset=1bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114-L1118] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset); [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] havoc #t~mem16; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem17.base=1bv32, #t~mem17.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129-L1133] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset)); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume 8464bv32 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320-L1324] assume 0bv32 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325-L1329] assume !~bvsle32(~ret~0, 0bv32); [L1330] ~got_new_session~0 := 1bv32; [L1331] call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1332] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem129; [L1665] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume 8496bv32 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337-L1341] assume 1bv32 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342-L1346] assume !~bvsle32(~ret~0, 0bv32); [L1347] call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] assume 0bv32 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem129; [L1665] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228-L1634] assume 8656bv32 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32); [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554-L1559] assume !(0bv32 == ~tmp___9~0); [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561-L1565] assume 2bv32 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566-L1570] assume !~bvsle32(~ret~0, 0bv32); [L1571] call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1572] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574-L1579] assume !(0bv32 == ~tmp___10~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem129; [L1665] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228-L1634] assume !(8656bv32 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231-L1633] assume !(8657bv32 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234-L1632] assume 8672bv32 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584-L1592] assume !(4bv32 == ~blastFlag~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587-L1591] assume 5bv32 == ~blastFlag~0; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=0bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L1042] ~init~0 := 1bv32; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32); [L1043] call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); [L1074] call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc3.base=7bv32, #t~malloc3.offset=0bv32, #t~malloc4.base=1bv32, #t~malloc4.offset=0bv32, #t~malloc5.base=3bv32, #t~malloc5.offset=0bv32, #t~malloc6.base=2bv32, #t~malloc6.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32, ~s~0.base=7bv32, ~s~0.offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); [L1107] havoc #t~nondet13; [L1108] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0bv32, 0bv32; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem14.base=0bv32, #t~mem14.offset=1bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114-L1118] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset); [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] havoc #t~mem16; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem17.base=1bv32, #t~mem17.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129-L1133] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset)); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume 8464bv32 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320-L1324] assume 0bv32 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325-L1329] assume !~bvsle32(~ret~0, 0bv32); [L1330] ~got_new_session~0 := 1bv32; [L1331] call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1332] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem129; [L1665] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume 8496bv32 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337-L1341] assume 1bv32 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342-L1346] assume !~bvsle32(~ret~0, 0bv32); [L1347] call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] assume 0bv32 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem129; [L1665] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228-L1634] assume 8656bv32 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32); [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554-L1559] assume !(0bv32 == ~tmp___9~0); [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561-L1565] assume 2bv32 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566-L1570] assume !~bvsle32(~ret~0, 0bv32); [L1571] call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1572] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574-L1579] assume !(0bv32 == ~tmp___10~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem129; [L1665] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228-L1634] assume !(8656bv32 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231-L1633] assume !(8657bv32 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234-L1632] assume 8672bv32 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584-L1592] assume !(4bv32 == ~blastFlag~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587-L1591] assume 5bv32 == ~blastFlag~0; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem116; [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem116; [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem116; [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- [2018-11-23 15:19:44,924 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 15:19:44,925 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem116; [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1048578:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={7:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={1:0}, s={7:0}, SSLv3_server_data={1048578:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={7:0}, SSLv3_server_data={1048578:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->info_callback={0:1}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=0, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->hit=256, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 15:19:46,450 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_f6547d23-1f77-4d67-be2a-dbb3380278ef/bin-2019/utaipan/witness.graphml [2018-11-23 15:19:46,450 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 15:19:46,451 INFO L168 Benchmark]: Toolchain (without parser) took 11186.87 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 224.4 MB). Free memory was 943.3 MB in the beginning and 1.0 GB in the end (delta: -66.0 MB). Peak memory consumption was 158.4 MB. Max. memory is 11.5 GB. [2018-11-23 15:19:46,453 INFO L168 Benchmark]: CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 15:19:46,453 INFO L168 Benchmark]: CACSL2BoogieTranslator took 509.73 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 151.5 MB). Free memory was 943.3 MB in the beginning and 1.1 GB in the end (delta: -186.8 MB). Peak memory consumption was 47.3 MB. Max. memory is 11.5 GB. [2018-11-23 15:19:46,453 INFO L168 Benchmark]: Boogie Procedure Inliner took 30.61 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2018-11-23 15:19:46,454 INFO L168 Benchmark]: Boogie Preprocessor took 65.57 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 8.1 MB). Peak memory consumption was 8.1 MB. Max. memory is 11.5 GB. [2018-11-23 15:19:46,454 INFO L168 Benchmark]: RCFGBuilder took 2143.24 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 85.0 MB). Peak memory consumption was 85.0 MB. Max. memory is 11.5 GB. [2018-11-23 15:19:46,454 INFO L168 Benchmark]: TraceAbstraction took 3068.94 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 72.9 MB). Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -70.9 MB). Peak memory consumption was 2.0 MB. Max. memory is 11.5 GB. [2018-11-23 15:19:46,455 INFO L168 Benchmark]: Witness Printer took 5365.20 ms. Allocated memory is still 1.3 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 91.9 MB). Peak memory consumption was 91.9 MB. Max. memory is 11.5 GB. [2018-11-23 15:19:46,457 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 509.73 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 151.5 MB). Free memory was 943.3 MB in the beginning and 1.1 GB in the end (delta: -186.8 MB). Peak memory consumption was 47.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 30.61 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 65.57 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 8.1 MB). Peak memory consumption was 8.1 MB. Max. memory is 11.5 GB. * RCFGBuilder took 2143.24 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 85.0 MB). Peak memory consumption was 85.0 MB. Max. memory is 11.5 GB. * TraceAbstraction took 3068.94 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 72.9 MB). Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -70.9 MB). Peak memory consumption was 2.0 MB. Max. memory is 11.5 GB. * Witness Printer took 5365.20 ms. Allocated memory is still 1.3 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 91.9 MB). Peak memory consumption was 91.9 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 1706]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1048578:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={7:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={1:0}, s={7:0}, SSLv3_server_data={1048578:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={7:0}, SSLv3_server_data={1048578:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->info_callback={0:1}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=0, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->hit=256, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 156 locations, 1 error locations. UNSAFE Result, 3.0s OverallTime, 5 OverallIterations, 4 TraceHistogramMax, 0.2s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 1372 SDtfs, 597 SDslu, 804 SDs, 0 SdLazy, 69 SolverSat, 20 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.1s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 336 GetRequests, 332 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=498occurred in iteration=3, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 4 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 0.1s InterpolantComputationTime, 472 NumberOfCodeBlocks, 472 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 336 ConstructedInterpolants, 0 QuantifiedInterpolants, 60078 SizeOfPredicates, 4 NumberOfNonLiveVariables, 1165 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 153/153 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...