./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec4_product13.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 678e0110 Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec4_product13.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 70d32ce76add0a705a911f06bde28b97180fa1ae ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.24-678e011 [2019-11-20 10:03:03,291 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-11-20 10:03:03,293 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-11-20 10:03:03,306 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-11-20 10:03:03,307 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-11-20 10:03:03,308 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-11-20 10:03:03,310 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-11-20 10:03:03,312 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-11-20 10:03:03,315 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-11-20 10:03:03,316 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-11-20 10:03:03,317 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-11-20 10:03:03,319 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-11-20 10:03:03,319 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-11-20 10:03:03,320 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-11-20 10:03:03,322 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-11-20 10:03:03,323 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-11-20 10:03:03,324 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-11-20 10:03:03,325 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-11-20 10:03:03,330 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-11-20 10:03:03,332 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-11-20 10:03:03,334 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-11-20 10:03:03,336 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-11-20 10:03:03,337 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-11-20 10:03:03,338 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-11-20 10:03:03,347 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-11-20 10:03:03,348 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-11-20 10:03:03,349 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-11-20 10:03:03,351 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-11-20 10:03:03,353 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-11-20 10:03:03,355 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-11-20 10:03:03,356 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-11-20 10:03:03,357 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-11-20 10:03:03,357 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-11-20 10:03:03,359 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-11-20 10:03:03,362 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-11-20 10:03:03,363 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-11-20 10:03:03,363 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-11-20 10:03:03,364 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-11-20 10:03:03,364 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-11-20 10:03:03,368 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-11-20 10:03:03,370 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-11-20 10:03:03,371 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2019-11-20 10:03:03,393 INFO L113 SettingsManager]: Loading preferences was successful [2019-11-20 10:03:03,394 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-11-20 10:03:03,395 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-11-20 10:03:03,396 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-11-20 10:03:03,396 INFO L138 SettingsManager]: * Use SBE=true [2019-11-20 10:03:03,396 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-11-20 10:03:03,396 INFO L138 SettingsManager]: * sizeof long=4 [2019-11-20 10:03:03,397 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-11-20 10:03:03,397 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-11-20 10:03:03,397 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-11-20 10:03:03,398 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-11-20 10:03:03,398 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-11-20 10:03:03,399 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-11-20 10:03:03,399 INFO L138 SettingsManager]: * sizeof long double=12 [2019-11-20 10:03:03,399 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-11-20 10:03:03,399 INFO L138 SettingsManager]: * Use constant arrays=true [2019-11-20 10:03:03,400 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-11-20 10:03:03,400 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-11-20 10:03:03,400 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-11-20 10:03:03,400 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-11-20 10:03:03,401 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-11-20 10:03:03,401 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-11-20 10:03:03,401 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-11-20 10:03:03,401 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-11-20 10:03:03,402 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-11-20 10:03:03,402 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-11-20 10:03:03,402 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-11-20 10:03:03,402 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-11-20 10:03:03,403 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 70d32ce76add0a705a911f06bde28b97180fa1ae [2019-11-20 10:03:03,595 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-11-20 10:03:03,612 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-11-20 10:03:03,616 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-11-20 10:03:03,618 INFO L271 PluginConnector]: Initializing CDTParser... [2019-11-20 10:03:03,618 INFO L275 PluginConnector]: CDTParser initialized [2019-11-20 10:03:03,619 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer/../../sv-benchmarks/c/product-lines/email_spec4_product13.cil.c [2019-11-20 10:03:03,703 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer/data/a490ee9af/3b419c60878f4b89a9e9dc11150e4d11/FLAG6a7f945af [2019-11-20 10:03:04,302 INFO L306 CDTParser]: Found 1 translation units. [2019-11-20 10:03:04,303 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/sv-benchmarks/c/product-lines/email_spec4_product13.cil.c [2019-11-20 10:03:04,328 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer/data/a490ee9af/3b419c60878f4b89a9e9dc11150e4d11/FLAG6a7f945af [2019-11-20 10:03:04,484 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer/data/a490ee9af/3b419c60878f4b89a9e9dc11150e4d11 [2019-11-20 10:03:04,487 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-11-20 10:03:04,489 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-11-20 10:03:04,493 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-11-20 10:03:04,493 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-11-20 10:03:04,497 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-11-20 10:03:04,498 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 10:03:04" (1/1) ... [2019-11-20 10:03:04,501 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@46596362 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:04, skipping insertion in model container [2019-11-20 10:03:04,501 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 10:03:04" (1/1) ... [2019-11-20 10:03:04,509 INFO L142 MainTranslator]: Starting translation in SV-COMP mode [2019-11-20 10:03:04,595 INFO L173 MainTranslator]: Built tables and reachable declarations [2019-11-20 10:03:05,432 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-20 10:03:05,463 INFO L188 MainTranslator]: Completed pre-run [2019-11-20 10:03:05,583 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-20 10:03:05,687 INFO L192 MainTranslator]: Completed translation [2019-11-20 10:03:05,688 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:05 WrapperNode [2019-11-20 10:03:05,689 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-11-20 10:03:05,690 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-11-20 10:03:05,690 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-11-20 10:03:05,690 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-11-20 10:03:05,700 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:05" (1/1) ... [2019-11-20 10:03:05,763 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:05" (1/1) ... [2019-11-20 10:03:05,876 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-11-20 10:03:05,878 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-11-20 10:03:05,878 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-11-20 10:03:05,878 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-11-20 10:03:05,890 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:05" (1/1) ... [2019-11-20 10:03:05,890 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:05" (1/1) ... [2019-11-20 10:03:05,905 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:05" (1/1) ... [2019-11-20 10:03:05,905 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:05" (1/1) ... [2019-11-20 10:03:05,966 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:05" (1/1) ... [2019-11-20 10:03:06,011 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:05" (1/1) ... [2019-11-20 10:03:06,017 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:05" (1/1) ... [2019-11-20 10:03:06,035 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-11-20 10:03:06,037 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-11-20 10:03:06,037 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-11-20 10:03:06,037 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-11-20 10:03:06,039 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:05" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-11-20 10:03:06,135 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2019-11-20 10:03:06,135 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-11-20 10:03:06,135 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-11-20 10:03:06,136 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-11-20 10:03:06,137 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-11-20 10:03:08,662 INFO L280 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-11-20 10:03:08,663 INFO L285 CfgBuilder]: Removed 235 assume(true) statements. [2019-11-20 10:03:08,664 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:03:08 BoogieIcfgContainer [2019-11-20 10:03:08,664 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-11-20 10:03:08,666 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-11-20 10:03:08,666 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-11-20 10:03:08,670 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-11-20 10:03:08,670 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 10:03:04" (1/3) ... [2019-11-20 10:03:08,671 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5eb00572 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 10:03:08, skipping insertion in model container [2019-11-20 10:03:08,671 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:03:05" (2/3) ... [2019-11-20 10:03:08,672 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5eb00572 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 10:03:08, skipping insertion in model container [2019-11-20 10:03:08,672 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:03:08" (3/3) ... [2019-11-20 10:03:08,678 INFO L109 eAbstractionObserver]: Analyzing ICFG email_spec4_product13.cil.c [2019-11-20 10:03:08,705 INFO L153 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-11-20 10:03:08,714 INFO L165 ceAbstractionStarter]: Appying trace abstraction to program that has 2 error locations. [2019-11-20 10:03:08,742 INFO L249 AbstractCegarLoop]: Starting to check reachability of 2 error locations. [2019-11-20 10:03:08,807 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-11-20 10:03:08,821 INFO L374 AbstractCegarLoop]: Hoare is true [2019-11-20 10:03:08,822 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-11-20 10:03:08,822 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-11-20 10:03:08,822 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-11-20 10:03:08,822 INFO L378 AbstractCegarLoop]: Difference is false [2019-11-20 10:03:08,822 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-11-20 10:03:08,823 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-11-20 10:03:08,892 INFO L276 IsEmpty]: Start isEmpty. Operand 383 states. [2019-11-20 10:03:08,906 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2019-11-20 10:03:08,906 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:08,907 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:08,908 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:08,915 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:08,915 INFO L82 PathProgramCache]: Analyzing trace with hash -2045115247, now seen corresponding path program 1 times [2019-11-20 10:03:08,925 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:08,926 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [774609823] [2019-11-20 10:03:08,926 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:09,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:09,350 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 10:03:09,351 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [774609823] [2019-11-20 10:03:09,351 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:09,352 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-20 10:03:09,353 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [405977307] [2019-11-20 10:03:09,358 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-20 10:03:09,359 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:09,374 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 10:03:09,375 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 10:03:09,377 INFO L87 Difference]: Start difference. First operand 383 states. Second operand 3 states. [2019-11-20 10:03:09,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:09,629 INFO L93 Difference]: Finished difference Result 1114 states and 1961 transitions. [2019-11-20 10:03:09,630 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 10:03:09,632 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 40 [2019-11-20 10:03:09,632 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:09,666 INFO L225 Difference]: With dead ends: 1114 [2019-11-20 10:03:09,667 INFO L226 Difference]: Without dead ends: 668 [2019-11-20 10:03:09,680 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 10:03:09,708 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 668 states. [2019-11-20 10:03:09,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 668 to 343. [2019-11-20 10:03:09,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-11-20 10:03:09,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 598 transitions. [2019-11-20 10:03:09,787 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 598 transitions. Word has length 40 [2019-11-20 10:03:09,787 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:09,788 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 598 transitions. [2019-11-20 10:03:09,788 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-20 10:03:09,788 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 598 transitions. [2019-11-20 10:03:09,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2019-11-20 10:03:09,792 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:09,793 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:09,800 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:09,800 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:09,801 INFO L82 PathProgramCache]: Analyzing trace with hash 581557763, now seen corresponding path program 1 times [2019-11-20 10:03:09,801 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:09,802 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1910999588] [2019-11-20 10:03:09,802 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:09,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:09,994 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 10:03:09,994 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1910999588] [2019-11-20 10:03:09,995 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:09,995 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-20 10:03:09,995 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1545228743] [2019-11-20 10:03:09,997 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-20 10:03:09,997 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:09,998 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-20 10:03:09,998 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-20 10:03:09,998 INFO L87 Difference]: Start difference. First operand 343 states and 598 transitions. Second operand 5 states. [2019-11-20 10:03:10,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:10,326 INFO L93 Difference]: Finished difference Result 978 states and 1710 transitions. [2019-11-20 10:03:10,326 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-20 10:03:10,327 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 42 [2019-11-20 10:03:10,327 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:10,339 INFO L225 Difference]: With dead ends: 978 [2019-11-20 10:03:10,339 INFO L226 Difference]: Without dead ends: 654 [2019-11-20 10:03:10,343 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2019-11-20 10:03:10,346 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 654 states. [2019-11-20 10:03:10,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 654 to 343. [2019-11-20 10:03:10,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-11-20 10:03:10,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 597 transitions. [2019-11-20 10:03:10,446 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 597 transitions. Word has length 42 [2019-11-20 10:03:10,446 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:10,446 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 597 transitions. [2019-11-20 10:03:10,447 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-20 10:03:10,447 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 597 transitions. [2019-11-20 10:03:10,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2019-11-20 10:03:10,450 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:10,451 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:10,451 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:10,451 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:10,451 INFO L82 PathProgramCache]: Analyzing trace with hash -668907248, now seen corresponding path program 1 times [2019-11-20 10:03:10,452 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:10,452 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [233225523] [2019-11-20 10:03:10,452 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:10,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:10,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 10:03:10,592 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [233225523] [2019-11-20 10:03:10,592 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:10,592 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-20 10:03:10,593 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [597165686] [2019-11-20 10:03:10,593 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-20 10:03:10,594 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:10,594 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 10:03:10,594 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 10:03:10,594 INFO L87 Difference]: Start difference. First operand 343 states and 597 transitions. Second operand 3 states. [2019-11-20 10:03:10,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:10,647 INFO L93 Difference]: Finished difference Result 668 states and 1168 transitions. [2019-11-20 10:03:10,648 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 10:03:10,648 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 43 [2019-11-20 10:03:10,648 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:10,651 INFO L225 Difference]: With dead ends: 668 [2019-11-20 10:03:10,651 INFO L226 Difference]: Without dead ends: 348 [2019-11-20 10:03:10,653 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 10:03:10,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2019-11-20 10:03:10,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 343. [2019-11-20 10:03:10,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-11-20 10:03:10,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 596 transitions. [2019-11-20 10:03:10,669 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 596 transitions. Word has length 43 [2019-11-20 10:03:10,670 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:10,670 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 596 transitions. [2019-11-20 10:03:10,670 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-20 10:03:10,670 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 596 transitions. [2019-11-20 10:03:10,674 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2019-11-20 10:03:10,674 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:10,674 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:10,675 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:10,675 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:10,675 INFO L82 PathProgramCache]: Analyzing trace with hash 836086358, now seen corresponding path program 1 times [2019-11-20 10:03:10,675 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:10,676 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [291280226] [2019-11-20 10:03:10,676 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:10,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:10,794 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 10:03:10,795 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [291280226] [2019-11-20 10:03:10,795 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:10,795 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-20 10:03:10,795 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [595163390] [2019-11-20 10:03:10,796 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-20 10:03:10,796 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:10,796 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 10:03:10,796 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 10:03:10,797 INFO L87 Difference]: Start difference. First operand 343 states and 596 transitions. Second operand 3 states. [2019-11-20 10:03:10,855 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:10,860 INFO L93 Difference]: Finished difference Result 678 states and 1181 transitions. [2019-11-20 10:03:10,861 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 10:03:10,861 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 44 [2019-11-20 10:03:10,862 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:10,865 INFO L225 Difference]: With dead ends: 678 [2019-11-20 10:03:10,865 INFO L226 Difference]: Without dead ends: 343 [2019-11-20 10:03:10,867 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 10:03:10,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2019-11-20 10:03:10,882 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2019-11-20 10:03:10,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-11-20 10:03:10,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 594 transitions. [2019-11-20 10:03:10,884 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 594 transitions. Word has length 44 [2019-11-20 10:03:10,885 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:10,885 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 594 transitions. [2019-11-20 10:03:10,885 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-20 10:03:10,885 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 594 transitions. [2019-11-20 10:03:10,890 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2019-11-20 10:03:10,891 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:10,891 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:10,891 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:10,891 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:10,892 INFO L82 PathProgramCache]: Analyzing trace with hash -1027434837, now seen corresponding path program 1 times [2019-11-20 10:03:10,892 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:10,892 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1968289778] [2019-11-20 10:03:10,893 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:10,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:11,046 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 10:03:11,047 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1968289778] [2019-11-20 10:03:11,047 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:11,047 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-20 10:03:11,047 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1701670483] [2019-11-20 10:03:11,048 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-20 10:03:11,048 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:11,048 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-20 10:03:11,048 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-20 10:03:11,048 INFO L87 Difference]: Start difference. First operand 343 states and 594 transitions. Second operand 5 states. [2019-11-20 10:03:11,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:11,273 INFO L93 Difference]: Finished difference Result 968 states and 1690 transitions. [2019-11-20 10:03:11,274 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-20 10:03:11,274 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 45 [2019-11-20 10:03:11,276 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:11,281 INFO L225 Difference]: With dead ends: 968 [2019-11-20 10:03:11,282 INFO L226 Difference]: Without dead ends: 652 [2019-11-20 10:03:11,284 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-11-20 10:03:11,286 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 652 states. [2019-11-20 10:03:11,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 652 to 343. [2019-11-20 10:03:11,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-11-20 10:03:11,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 593 transitions. [2019-11-20 10:03:11,306 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 593 transitions. Word has length 45 [2019-11-20 10:03:11,308 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:11,308 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 593 transitions. [2019-11-20 10:03:11,309 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-20 10:03:11,309 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 593 transitions. [2019-11-20 10:03:11,311 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2019-11-20 10:03:11,311 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:11,311 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:11,312 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:11,312 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:11,312 INFO L82 PathProgramCache]: Analyzing trace with hash -913470578, now seen corresponding path program 1 times [2019-11-20 10:03:11,312 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:11,313 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2092043218] [2019-11-20 10:03:11,313 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:11,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:11,436 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 10:03:11,436 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2092043218] [2019-11-20 10:03:11,437 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:11,437 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-20 10:03:11,437 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [142237729] [2019-11-20 10:03:11,437 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-20 10:03:11,438 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:11,438 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-20 10:03:11,438 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-20 10:03:11,438 INFO L87 Difference]: Start difference. First operand 343 states and 593 transitions. Second operand 5 states. [2019-11-20 10:03:11,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:11,667 INFO L93 Difference]: Finished difference Result 973 states and 1695 transitions. [2019-11-20 10:03:11,667 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-20 10:03:11,668 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 46 [2019-11-20 10:03:11,668 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:11,673 INFO L225 Difference]: With dead ends: 973 [2019-11-20 10:03:11,674 INFO L226 Difference]: Without dead ends: 657 [2019-11-20 10:03:11,676 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-11-20 10:03:11,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 657 states. [2019-11-20 10:03:11,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 657 to 343. [2019-11-20 10:03:11,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-11-20 10:03:11,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 592 transitions. [2019-11-20 10:03:11,700 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 592 transitions. Word has length 46 [2019-11-20 10:03:11,700 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:11,700 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 592 transitions. [2019-11-20 10:03:11,700 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-20 10:03:11,700 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 592 transitions. [2019-11-20 10:03:11,702 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2019-11-20 10:03:11,702 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:11,706 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:11,706 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:11,707 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:11,707 INFO L82 PathProgramCache]: Analyzing trace with hash -1520446810, now seen corresponding path program 1 times [2019-11-20 10:03:11,708 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:11,708 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1757702490] [2019-11-20 10:03:11,708 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:11,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:11,783 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 10:03:11,783 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1757702490] [2019-11-20 10:03:11,784 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:11,784 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-20 10:03:11,784 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [376985248] [2019-11-20 10:03:11,785 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-20 10:03:11,785 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:11,785 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 10:03:11,785 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 10:03:11,785 INFO L87 Difference]: Start difference. First operand 343 states and 592 transitions. Second operand 3 states. [2019-11-20 10:03:11,812 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:11,813 INFO L93 Difference]: Finished difference Result 452 states and 767 transitions. [2019-11-20 10:03:11,813 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 10:03:11,813 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 47 [2019-11-20 10:03:11,814 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:11,816 INFO L225 Difference]: With dead ends: 452 [2019-11-20 10:03:11,816 INFO L226 Difference]: Without dead ends: 346 [2019-11-20 10:03:11,817 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 10:03:11,819 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 346 states. [2019-11-20 10:03:11,836 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 346 to 345. [2019-11-20 10:03:11,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 345 states. [2019-11-20 10:03:11,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 345 states to 345 states and 594 transitions. [2019-11-20 10:03:11,838 INFO L78 Accepts]: Start accepts. Automaton has 345 states and 594 transitions. Word has length 47 [2019-11-20 10:03:11,838 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:11,839 INFO L462 AbstractCegarLoop]: Abstraction has 345 states and 594 transitions. [2019-11-20 10:03:11,839 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-20 10:03:11,839 INFO L276 IsEmpty]: Start isEmpty. Operand 345 states and 594 transitions. [2019-11-20 10:03:11,840 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2019-11-20 10:03:11,840 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:11,840 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:11,840 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:11,841 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:11,841 INFO L82 PathProgramCache]: Analyzing trace with hash -748805212, now seen corresponding path program 1 times [2019-11-20 10:03:11,841 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:11,841 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1955986731] [2019-11-20 10:03:11,842 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:11,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:11,897 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 10:03:11,897 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1955986731] [2019-11-20 10:03:11,897 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:11,897 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-20 10:03:11,898 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1123968021] [2019-11-20 10:03:11,898 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-20 10:03:11,898 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:11,899 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 10:03:11,899 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 10:03:11,899 INFO L87 Difference]: Start difference. First operand 345 states and 594 transitions. Second operand 3 states. [2019-11-20 10:03:11,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:11,944 INFO L93 Difference]: Finished difference Result 921 states and 1606 transitions. [2019-11-20 10:03:11,944 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 10:03:11,944 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 53 [2019-11-20 10:03:11,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:11,949 INFO L225 Difference]: With dead ends: 921 [2019-11-20 10:03:11,949 INFO L226 Difference]: Without dead ends: 607 [2019-11-20 10:03:11,950 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 10:03:11,952 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 607 states. [2019-11-20 10:03:11,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 607 to 501. [2019-11-20 10:03:11,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 501 states. [2019-11-20 10:03:11,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 501 states to 501 states and 880 transitions. [2019-11-20 10:03:11,984 INFO L78 Accepts]: Start accepts. Automaton has 501 states and 880 transitions. Word has length 53 [2019-11-20 10:03:11,985 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:11,985 INFO L462 AbstractCegarLoop]: Abstraction has 501 states and 880 transitions. [2019-11-20 10:03:11,985 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-20 10:03:11,985 INFO L276 IsEmpty]: Start isEmpty. Operand 501 states and 880 transitions. [2019-11-20 10:03:11,986 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2019-11-20 10:03:11,986 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:11,986 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:11,987 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:11,987 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:11,987 INFO L82 PathProgramCache]: Analyzing trace with hash 203078211, now seen corresponding path program 1 times [2019-11-20 10:03:11,987 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:11,987 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1217556878] [2019-11-20 10:03:11,988 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:12,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:12,082 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-20 10:03:12,083 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1217556878] [2019-11-20 10:03:12,083 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:12,083 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 10:03:12,083 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [605666597] [2019-11-20 10:03:12,084 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-20 10:03:12,084 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:12,084 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-20 10:03:12,085 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-20 10:03:12,085 INFO L87 Difference]: Start difference. First operand 501 states and 880 transitions. Second operand 5 states. [2019-11-20 10:03:12,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:12,328 INFO L93 Difference]: Finished difference Result 1004 states and 1699 transitions. [2019-11-20 10:03:12,329 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-11-20 10:03:12,329 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 54 [2019-11-20 10:03:12,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:12,336 INFO L225 Difference]: With dead ends: 1004 [2019-11-20 10:03:12,336 INFO L226 Difference]: Without dead ends: 924 [2019-11-20 10:03:12,337 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-11-20 10:03:12,339 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 924 states. [2019-11-20 10:03:12,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 924 to 584. [2019-11-20 10:03:12,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 584 states. [2019-11-20 10:03:12,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 584 states to 584 states and 1014 transitions. [2019-11-20 10:03:12,382 INFO L78 Accepts]: Start accepts. Automaton has 584 states and 1014 transitions. Word has length 54 [2019-11-20 10:03:12,382 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:12,382 INFO L462 AbstractCegarLoop]: Abstraction has 584 states and 1014 transitions. [2019-11-20 10:03:12,382 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-20 10:03:12,382 INFO L276 IsEmpty]: Start isEmpty. Operand 584 states and 1014 transitions. [2019-11-20 10:03:12,384 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2019-11-20 10:03:12,384 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:12,384 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:12,384 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:12,384 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:12,385 INFO L82 PathProgramCache]: Analyzing trace with hash 1846986458, now seen corresponding path program 1 times [2019-11-20 10:03:12,385 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:12,385 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1924724039] [2019-11-20 10:03:12,385 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:12,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:12,479 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-20 10:03:12,479 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1924724039] [2019-11-20 10:03:12,480 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:12,480 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-20 10:03:12,480 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [864843648] [2019-11-20 10:03:12,480 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-11-20 10:03:12,481 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:12,481 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-20 10:03:12,481 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-11-20 10:03:12,481 INFO L87 Difference]: Start difference. First operand 584 states and 1014 transitions. Second operand 7 states. [2019-11-20 10:03:12,697 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:12,697 INFO L93 Difference]: Finished difference Result 832 states and 1413 transitions. [2019-11-20 10:03:12,698 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-11-20 10:03:12,698 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 55 [2019-11-20 10:03:12,698 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:12,703 INFO L225 Difference]: With dead ends: 832 [2019-11-20 10:03:12,703 INFO L226 Difference]: Without dead ends: 682 [2019-11-20 10:03:12,704 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=64, Invalid=118, Unknown=0, NotChecked=0, Total=182 [2019-11-20 10:03:12,707 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 682 states. [2019-11-20 10:03:12,751 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 682 to 573. [2019-11-20 10:03:12,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 573 states. [2019-11-20 10:03:12,755 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 573 states to 573 states and 994 transitions. [2019-11-20 10:03:12,755 INFO L78 Accepts]: Start accepts. Automaton has 573 states and 994 transitions. Word has length 55 [2019-11-20 10:03:12,755 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:12,755 INFO L462 AbstractCegarLoop]: Abstraction has 573 states and 994 transitions. [2019-11-20 10:03:12,756 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-11-20 10:03:12,756 INFO L276 IsEmpty]: Start isEmpty. Operand 573 states and 994 transitions. [2019-11-20 10:03:12,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2019-11-20 10:03:12,757 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:12,758 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:12,758 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:12,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:12,758 INFO L82 PathProgramCache]: Analyzing trace with hash 930934001, now seen corresponding path program 1 times [2019-11-20 10:03:12,759 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:12,759 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1524192453] [2019-11-20 10:03:12,759 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:12,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:12,892 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-20 10:03:12,892 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1524192453] [2019-11-20 10:03:12,892 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:12,892 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-20 10:03:12,893 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1530214631] [2019-11-20 10:03:12,893 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-11-20 10:03:12,893 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:12,894 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-20 10:03:12,894 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-11-20 10:03:12,894 INFO L87 Difference]: Start difference. First operand 573 states and 994 transitions. Second operand 7 states. [2019-11-20 10:03:13,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:13,988 INFO L93 Difference]: Finished difference Result 1134 states and 1876 transitions. [2019-11-20 10:03:13,991 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2019-11-20 10:03:13,991 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 57 [2019-11-20 10:03:13,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:14,001 INFO L225 Difference]: With dead ends: 1134 [2019-11-20 10:03:14,002 INFO L226 Difference]: Without dead ends: 1100 [2019-11-20 10:03:14,003 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 37 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=80, Invalid=192, Unknown=0, NotChecked=0, Total=272 [2019-11-20 10:03:14,010 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1100 states. [2019-11-20 10:03:14,059 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1100 to 742. [2019-11-20 10:03:14,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 742 states. [2019-11-20 10:03:14,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 742 states to 742 states and 1264 transitions. [2019-11-20 10:03:14,065 INFO L78 Accepts]: Start accepts. Automaton has 742 states and 1264 transitions. Word has length 57 [2019-11-20 10:03:14,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:14,067 INFO L462 AbstractCegarLoop]: Abstraction has 742 states and 1264 transitions. [2019-11-20 10:03:14,067 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-11-20 10:03:14,067 INFO L276 IsEmpty]: Start isEmpty. Operand 742 states and 1264 transitions. [2019-11-20 10:03:14,068 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2019-11-20 10:03:14,069 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:14,069 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:14,069 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:14,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:14,070 INFO L82 PathProgramCache]: Analyzing trace with hash -1204239761, now seen corresponding path program 1 times [2019-11-20 10:03:14,070 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:14,070 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [457697072] [2019-11-20 10:03:14,071 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:14,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:14,209 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-20 10:03:14,210 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [457697072] [2019-11-20 10:03:14,210 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:14,210 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-11-20 10:03:14,210 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [486702304] [2019-11-20 10:03:14,211 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-11-20 10:03:14,211 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:14,211 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-20 10:03:14,212 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-11-20 10:03:14,212 INFO L87 Difference]: Start difference. First operand 742 states and 1264 transitions. Second operand 8 states. [2019-11-20 10:03:14,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:14,730 INFO L93 Difference]: Finished difference Result 962 states and 1609 transitions. [2019-11-20 10:03:14,731 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-11-20 10:03:14,731 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 58 [2019-11-20 10:03:14,731 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:14,736 INFO L225 Difference]: With dead ends: 962 [2019-11-20 10:03:14,736 INFO L226 Difference]: Without dead ends: 706 [2019-11-20 10:03:14,738 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=92, Invalid=180, Unknown=0, NotChecked=0, Total=272 [2019-11-20 10:03:14,739 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 706 states. [2019-11-20 10:03:14,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 706 to 659. [2019-11-20 10:03:14,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 659 states. [2019-11-20 10:03:14,786 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 659 states to 659 states and 1126 transitions. [2019-11-20 10:03:14,786 INFO L78 Accepts]: Start accepts. Automaton has 659 states and 1126 transitions. Word has length 58 [2019-11-20 10:03:14,787 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:14,787 INFO L462 AbstractCegarLoop]: Abstraction has 659 states and 1126 transitions. [2019-11-20 10:03:14,787 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-11-20 10:03:14,787 INFO L276 IsEmpty]: Start isEmpty. Operand 659 states and 1126 transitions. [2019-11-20 10:03:14,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2019-11-20 10:03:14,790 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:14,790 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:14,790 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:14,791 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:14,791 INFO L82 PathProgramCache]: Analyzing trace with hash 1949742392, now seen corresponding path program 1 times [2019-11-20 10:03:14,791 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:14,791 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [543511166] [2019-11-20 10:03:14,792 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:14,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:14,906 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-20 10:03:14,907 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [543511166] [2019-11-20 10:03:14,907 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:14,907 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-11-20 10:03:14,907 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1021881495] [2019-11-20 10:03:14,908 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-11-20 10:03:14,908 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:14,908 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-11-20 10:03:14,909 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-11-20 10:03:14,909 INFO L87 Difference]: Start difference. First operand 659 states and 1126 transitions. Second operand 6 states. [2019-11-20 10:03:15,038 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:15,038 INFO L93 Difference]: Finished difference Result 766 states and 1284 transitions. [2019-11-20 10:03:15,039 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-11-20 10:03:15,039 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 77 [2019-11-20 10:03:15,040 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:15,044 INFO L225 Difference]: With dead ends: 766 [2019-11-20 10:03:15,044 INFO L226 Difference]: Without dead ends: 659 [2019-11-20 10:03:15,045 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-11-20 10:03:15,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 659 states. [2019-11-20 10:03:15,088 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 659 to 659. [2019-11-20 10:03:15,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 659 states. [2019-11-20 10:03:15,092 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 659 states to 659 states and 1123 transitions. [2019-11-20 10:03:15,092 INFO L78 Accepts]: Start accepts. Automaton has 659 states and 1123 transitions. Word has length 77 [2019-11-20 10:03:15,092 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:15,092 INFO L462 AbstractCegarLoop]: Abstraction has 659 states and 1123 transitions. [2019-11-20 10:03:15,093 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-11-20 10:03:15,093 INFO L276 IsEmpty]: Start isEmpty. Operand 659 states and 1123 transitions. [2019-11-20 10:03:15,095 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2019-11-20 10:03:15,095 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 10:03:15,095 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 10:03:15,096 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 10:03:15,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 10:03:15,096 INFO L82 PathProgramCache]: Analyzing trace with hash 140702341, now seen corresponding path program 1 times [2019-11-20 10:03:15,096 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 10:03:15,096 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [684312164] [2019-11-20 10:03:15,097 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 10:03:15,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 10:03:15,230 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-20 10:03:15,231 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [684312164] [2019-11-20 10:03:15,231 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 10:03:15,231 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-20 10:03:15,232 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1740790831] [2019-11-20 10:03:15,232 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-11-20 10:03:15,232 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 10:03:15,233 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-20 10:03:15,233 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2019-11-20 10:03:15,233 INFO L87 Difference]: Start difference. First operand 659 states and 1123 transitions. Second operand 8 states. [2019-11-20 10:03:15,559 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 10:03:15,559 INFO L93 Difference]: Finished difference Result 659 states and 1123 transitions. [2019-11-20 10:03:15,560 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-20 10:03:15,560 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 80 [2019-11-20 10:03:15,560 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 10:03:15,560 INFO L225 Difference]: With dead ends: 659 [2019-11-20 10:03:15,561 INFO L226 Difference]: Without dead ends: 0 [2019-11-20 10:03:15,562 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2019-11-20 10:03:15,562 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-11-20 10:03:15,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-11-20 10:03:15,563 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-11-20 10:03:15,563 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-11-20 10:03:15,563 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 80 [2019-11-20 10:03:15,563 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 10:03:15,564 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-20 10:03:15,564 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-11-20 10:03:15,564 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-11-20 10:03:15,564 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-11-20 10:03:15,569 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-11-20 10:03:17,107 WARN L191 SmtUtils]: Spent 529.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-20 10:03:18,063 WARN L191 SmtUtils]: Spent 409.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 70 [2019-11-20 10:03:18,181 WARN L191 SmtUtils]: Spent 117.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 50 [2019-11-20 10:03:18,387 WARN L191 SmtUtils]: Spent 195.00 ms on a formula simplification. DAG size of input: 69 DAG size of output: 53 [2019-11-20 10:03:18,797 WARN L191 SmtUtils]: Spent 315.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-20 10:03:19,225 WARN L191 SmtUtils]: Spent 314.00 ms on a formula simplification. DAG size of input: 91 DAG size of output: 62 [2019-11-20 10:03:19,503 WARN L191 SmtUtils]: Spent 277.00 ms on a formula simplification. DAG size of input: 91 DAG size of output: 62 [2019-11-20 10:03:19,960 WARN L191 SmtUtils]: Spent 136.00 ms on a formula simplification. DAG size of input: 61 DAG size of output: 42 [2019-11-20 10:03:20,358 WARN L191 SmtUtils]: Spent 164.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 49 [2019-11-20 10:03:20,703 WARN L191 SmtUtils]: Spent 213.00 ms on a formula simplification. DAG size of input: 69 DAG size of output: 53 [2019-11-20 10:03:21,331 WARN L191 SmtUtils]: Spent 349.00 ms on a formula simplification. DAG size of input: 94 DAG size of output: 65 [2019-11-20 10:03:21,846 WARN L191 SmtUtils]: Spent 312.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-20 10:03:22,657 WARN L191 SmtUtils]: Spent 406.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-20 10:03:23,409 WARN L191 SmtUtils]: Spent 219.00 ms on a formula simplification. DAG size of input: 75 DAG size of output: 59 [2019-11-20 10:03:23,723 WARN L191 SmtUtils]: Spent 313.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-20 10:03:24,182 WARN L191 SmtUtils]: Spent 311.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-20 10:03:24,496 WARN L191 SmtUtils]: Spent 311.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-20 10:03:24,827 INFO L444 ceAbstractionStarter]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 1866) no Hoare annotation was computed. [2019-11-20 10:03:24,828 INFO L440 ceAbstractionStarter]: At program point L498(lines 493 501) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~__ste_email_isSigned0~0 0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-11-20 10:03:24,828 INFO L444 ceAbstractionStarter]: For program point L1357(lines 1357 1363) no Hoare annotation was computed. [2019-11-20 10:03:24,828 INFO L444 ceAbstractionStarter]: For program point L2482(lines 2482 2490) no Hoare annotation was computed. [2019-11-20 10:03:24,828 INFO L444 ceAbstractionStarter]: For program point L1425(lines 1425 1431) no Hoare annotation was computed. [2019-11-20 10:03:24,828 INFO L444 ceAbstractionStarter]: For program point L2482-2(lines 2482 2490) no Hoare annotation was computed. [2019-11-20 10:03:24,828 INFO L444 ceAbstractionStarter]: For program point L1425-1(lines 1425 1431) no Hoare annotation was computed. [2019-11-20 10:03:24,828 INFO L444 ceAbstractionStarter]: For program point L1161(lines 1161 1167) no Hoare annotation was computed. [2019-11-20 10:03:24,828 INFO L444 ceAbstractionStarter]: For program point L1161-1(lines 1161 1167) no Hoare annotation was computed. [2019-11-20 10:03:24,828 INFO L444 ceAbstractionStarter]: For program point L1161-2(lines 1161 1167) no Hoare annotation was computed. [2019-11-20 10:03:24,828 INFO L444 ceAbstractionStarter]: For program point L1161-3(lines 1161 1167) no Hoare annotation was computed. [2019-11-20 10:03:24,828 INFO L444 ceAbstractionStarter]: For program point L1161-4(lines 1161 1167) no Hoare annotation was computed. [2019-11-20 10:03:24,828 INFO L440 ceAbstractionStarter]: At program point L2020(lines 2010 2066) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,829 INFO L444 ceAbstractionStarter]: For program point L2219(lines 2219 2227) no Hoare annotation was computed. [2019-11-20 10:03:24,829 INFO L440 ceAbstractionStarter]: At program point L1956(lines 1943 2071) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,829 INFO L444 ceAbstractionStarter]: For program point L2485(lines 2485 2489) no Hoare annotation was computed. [2019-11-20 10:03:24,829 INFO L444 ceAbstractionStarter]: For program point L2485-3(lines 2485 2489) no Hoare annotation was computed. [2019-11-20 10:03:24,829 INFO L444 ceAbstractionStarter]: For program point L1296(lines 1296 1320) no Hoare annotation was computed. [2019-11-20 10:03:24,829 INFO L444 ceAbstractionStarter]: For program point L1296-1(lines 1296 1320) no Hoare annotation was computed. [2019-11-20 10:03:24,829 INFO L444 ceAbstractionStarter]: For program point L1296-2(lines 1296 1320) no Hoare annotation was computed. [2019-11-20 10:03:24,829 INFO L444 ceAbstractionStarter]: For program point L1296-3(lines 1296 1320) no Hoare annotation was computed. [2019-11-20 10:03:24,829 INFO L444 ceAbstractionStarter]: For program point L1296-4(lines 1296 1320) no Hoare annotation was computed. [2019-11-20 10:03:24,829 INFO L444 ceAbstractionStarter]: For program point L1297(lines 1297 1305) no Hoare annotation was computed. [2019-11-20 10:03:24,829 INFO L444 ceAbstractionStarter]: For program point L1231(lines 1231 1277) no Hoare annotation was computed. [2019-11-20 10:03:24,829 INFO L444 ceAbstractionStarter]: For program point L1297-2(lines 1297 1305) no Hoare annotation was computed. [2019-11-20 10:03:24,830 INFO L444 ceAbstractionStarter]: For program point L2222(lines 2222 2226) no Hoare annotation was computed. [2019-11-20 10:03:24,830 INFO L444 ceAbstractionStarter]: For program point L1297-4(lines 1297 1305) no Hoare annotation was computed. [2019-11-20 10:03:24,830 INFO L440 ceAbstractionStarter]: At program point L2222-2(lines 2215 2230) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,830 INFO L444 ceAbstractionStarter]: For program point L1297-6(lines 1297 1305) no Hoare annotation was computed. [2019-11-20 10:03:24,830 INFO L444 ceAbstractionStarter]: For program point L1297-8(lines 1297 1305) no Hoare annotation was computed. [2019-11-20 10:03:24,830 INFO L447 ceAbstractionStarter]: At program point L2817-1(lines 2812 2820) the Hoare annotation is: true [2019-11-20 10:03:24,830 INFO L440 ceAbstractionStarter]: At program point L2817(lines 2812 2820) the Hoare annotation is: (let ((.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse10 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse11 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse12 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse13 (= ULTIMATE.start_outgoing_~client 1)) (.cse14 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse15 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse2 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse3 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse6 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse8 (= ULTIMATE.start_isSigned_~handle 1)) (.cse9 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse16 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse17 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 (let ((.cse4 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse7 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse2 .cse3 .cse4 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse2 .cse3 .cse4 .cse5 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse6 .cse7 .cse8 .cse9))) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17) (and .cse0 .cse1 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 (and .cse2 .cse3 .cse6 (and (= ~__ste_email_isSigned0~0 0) .cse5) .cse8 .cse9) .cse16 .cse17))) [2019-11-20 10:03:24,830 INFO L444 ceAbstractionStarter]: For program point L1232(lines 1232 1243) no Hoare annotation was computed. [2019-11-20 10:03:24,830 INFO L440 ceAbstractionStarter]: At program point L1166(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,830 INFO L440 ceAbstractionStarter]: At program point L1166-1(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,831 INFO L440 ceAbstractionStarter]: At program point L1166-2(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,831 INFO L440 ceAbstractionStarter]: At program point L1166-3(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,831 INFO L440 ceAbstractionStarter]: At program point L1166-4(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,831 INFO L444 ceAbstractionStarter]: For program point L2025(lines 2025 2032) no Hoare annotation was computed. [2019-11-20 10:03:24,831 INFO L440 ceAbstractionStarter]: At program point L2555(lines 2594 2606) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-11-20 10:03:24,832 INFO L444 ceAbstractionStarter]: For program point L1366(lines 1366 1382) no Hoare annotation was computed. [2019-11-20 10:03:24,832 INFO L444 ceAbstractionStarter]: For program point L1300(lines 1300 1304) no Hoare annotation was computed. [2019-11-20 10:03:24,832 INFO L444 ceAbstractionStarter]: For program point L1300-3(lines 1300 1304) no Hoare annotation was computed. [2019-11-20 10:03:24,832 INFO L444 ceAbstractionStarter]: For program point L1300-6(lines 1300 1304) no Hoare annotation was computed. [2019-11-20 10:03:24,832 INFO L444 ceAbstractionStarter]: For program point L1300-9(lines 1300 1304) no Hoare annotation was computed. [2019-11-20 10:03:24,832 INFO L444 ceAbstractionStarter]: For program point L1961(lines 1961 1968) no Hoare annotation was computed. [2019-11-20 10:03:24,832 INFO L444 ceAbstractionStarter]: For program point L1300-12(lines 1300 1304) no Hoare annotation was computed. [2019-11-20 10:03:24,832 INFO L444 ceAbstractionStarter]: For program point L2688(lines 2688 2692) no Hoare annotation was computed. [2019-11-20 10:03:24,833 INFO L440 ceAbstractionStarter]: At program point L2622(lines 2617 2625) the Hoare annotation is: (let ((.cse13 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse14 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse16 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse15 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse17 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (not (= 0 |ULTIMATE.start_is_queue_empty_#res|))) (.cse4 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse5 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse6 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse7 (= ULTIMATE.start_outgoing_~client 1)) (.cse8 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse9 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse18 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse19 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (let ((.cse10 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse11 (not (= ~__ste_client_privateKey0~0 0))) (.cse12 (and .cse13 .cse14 .cse15 .cse16 .cse17))) (or (and .cse10 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse11 .cse12) (and .cse10 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse11 .cse12))) .cse18 .cse19) (and (and .cse13 .cse14 .cse16 (and (= ~__ste_email_isSigned0~0 0) .cse15) .cse17) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse18 .cse19))) [2019-11-20 10:03:24,833 INFO L444 ceAbstractionStarter]: For program point L2688-1(lines 2688 2692) no Hoare annotation was computed. [2019-11-20 10:03:24,833 INFO L444 ceAbstractionStarter]: For program point L1565(lines 1565 1577) no Hoare annotation was computed. [2019-11-20 10:03:24,833 INFO L444 ceAbstractionStarter]: For program point L1565-2(lines 1565 1577) no Hoare annotation was computed. [2019-11-20 10:03:24,833 INFO L444 ceAbstractionStarter]: For program point L1565-4(lines 1565 1577) no Hoare annotation was computed. [2019-11-20 10:03:24,833 INFO L444 ceAbstractionStarter]: For program point L1367(lines 1367 1378) no Hoare annotation was computed. [2019-11-20 10:03:24,833 INFO L444 ceAbstractionStarter]: For program point L1236(lines 1236 1242) no Hoare annotation was computed. [2019-11-20 10:03:24,833 INFO L440 ceAbstractionStarter]: At program point L1435(lines 1388 1441) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-11-20 10:03:24,833 INFO L444 ceAbstractionStarter]: For program point L2426(lines 2426 2437) no Hoare annotation was computed. [2019-11-20 10:03:24,833 INFO L447 ceAbstractionStarter]: At program point L1435-1(lines 1388 1441) the Hoare annotation is: true [2019-11-20 10:03:24,833 INFO L444 ceAbstractionStarter]: For program point L2426-1(lines 2426 2437) no Hoare annotation was computed. [2019-11-20 10:03:24,833 INFO L444 ceAbstractionStarter]: For program point L1568(lines 1568 1576) no Hoare annotation was computed. [2019-11-20 10:03:24,833 INFO L444 ceAbstractionStarter]: For program point L1568-2(lines 1568 1576) no Hoare annotation was computed. [2019-11-20 10:03:24,834 INFO L444 ceAbstractionStarter]: For program point L1568-4(lines 1568 1576) no Hoare annotation was computed. [2019-11-20 10:03:24,834 INFO L444 ceAbstractionStarter]: For program point L2163-1(lines 2163 2174) no Hoare annotation was computed. [2019-11-20 10:03:24,834 INFO L444 ceAbstractionStarter]: For program point L1106(lines 1106 1122) no Hoare annotation was computed. [2019-11-20 10:03:24,834 INFO L444 ceAbstractionStarter]: For program point L2163(lines 2163 2174) no Hoare annotation was computed. [2019-11-20 10:03:24,834 INFO L444 ceAbstractionStarter]: For program point L1106-1(lines 1106 1122) no Hoare annotation was computed. [2019-11-20 10:03:24,834 INFO L444 ceAbstractionStarter]: For program point L1106-2(lines 1106 1122) no Hoare annotation was computed. [2019-11-20 10:03:24,834 INFO L444 ceAbstractionStarter]: For program point L1106-3(lines 1106 1122) no Hoare annotation was computed. [2019-11-20 10:03:24,834 INFO L444 ceAbstractionStarter]: For program point L1371(lines 1371 1377) no Hoare annotation was computed. [2019-11-20 10:03:24,834 INFO L440 ceAbstractionStarter]: At program point L1768(lines 1749 1770) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,834 INFO L444 ceAbstractionStarter]: For program point L1571(lines 1571 1575) no Hoare annotation was computed. [2019-11-20 10:03:24,834 INFO L440 ceAbstractionStarter]: At program point L1571-2(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-11-20 10:03:24,834 INFO L444 ceAbstractionStarter]: For program point L1571-3(lines 1571 1575) no Hoare annotation was computed. [2019-11-20 10:03:24,834 INFO L444 ceAbstractionStarter]: For program point L2430(lines 2430 2436) no Hoare annotation was computed. [2019-11-20 10:03:24,835 INFO L440 ceAbstractionStarter]: At program point L1571-5(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_setClientId_~handle 2) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_rjh_~rjh___0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-11-20 10:03:24,835 INFO L444 ceAbstractionStarter]: For program point L1571-6(lines 1571 1575) no Hoare annotation was computed. [2019-11-20 10:03:24,835 INFO L444 ceAbstractionStarter]: For program point L2430-1(lines 2430 2436) no Hoare annotation was computed. [2019-11-20 10:03:24,835 INFO L440 ceAbstractionStarter]: At program point L1571-8(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ~bob~0 1) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_isSigned0~0 0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,835 INFO L444 ceAbstractionStarter]: For program point L1307(lines 1307 1319) no Hoare annotation was computed. [2019-11-20 10:03:24,835 INFO L440 ceAbstractionStarter]: At program point L1307-1(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,835 INFO L444 ceAbstractionStarter]: For program point L1307-2(lines 1307 1319) no Hoare annotation was computed. [2019-11-20 10:03:24,835 INFO L440 ceAbstractionStarter]: At program point L1307-3(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,835 INFO L444 ceAbstractionStarter]: For program point L1307-4(lines 1307 1319) no Hoare annotation was computed. [2019-11-20 10:03:24,835 INFO L440 ceAbstractionStarter]: At program point L1307-5(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,835 INFO L444 ceAbstractionStarter]: For program point L1307-6(lines 1307 1319) no Hoare annotation was computed. [2019-11-20 10:03:24,835 INFO L440 ceAbstractionStarter]: At program point L1307-7(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,836 INFO L444 ceAbstractionStarter]: For program point L1307-8(lines 1307 1319) no Hoare annotation was computed. [2019-11-20 10:03:24,836 INFO L440 ceAbstractionStarter]: At program point L2034(lines 2021 2065) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,836 INFO L440 ceAbstractionStarter]: At program point L1307-9(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,836 INFO L444 ceAbstractionStarter]: For program point L1308(lines 1308 1316) no Hoare annotation was computed. [2019-11-20 10:03:24,836 INFO L444 ceAbstractionStarter]: For program point L1308-2(lines 1308 1316) no Hoare annotation was computed. [2019-11-20 10:03:24,836 INFO L444 ceAbstractionStarter]: For program point L1308-4(lines 1308 1316) no Hoare annotation was computed. [2019-11-20 10:03:24,836 INFO L444 ceAbstractionStarter]: For program point L2167-1(lines 2167 2173) no Hoare annotation was computed. [2019-11-20 10:03:24,837 INFO L444 ceAbstractionStarter]: For program point L1308-6(lines 1308 1316) no Hoare annotation was computed. [2019-11-20 10:03:24,837 INFO L444 ceAbstractionStarter]: For program point L1110(lines 1110 1121) no Hoare annotation was computed. [2019-11-20 10:03:24,837 INFO L444 ceAbstractionStarter]: For program point L2167(lines 2167 2173) no Hoare annotation was computed. [2019-11-20 10:03:24,837 INFO L444 ceAbstractionStarter]: For program point L1110-1(lines 1110 1121) no Hoare annotation was computed. [2019-11-20 10:03:24,837 INFO L444 ceAbstractionStarter]: For program point L1308-8(lines 1308 1316) no Hoare annotation was computed. [2019-11-20 10:03:24,837 INFO L444 ceAbstractionStarter]: For program point L1110-2(lines 1110 1121) no Hoare annotation was computed. [2019-11-20 10:03:24,837 INFO L444 ceAbstractionStarter]: For program point L1110-3(lines 1110 1121) no Hoare annotation was computed. [2019-11-20 10:03:24,837 INFO L444 ceAbstractionStarter]: For program point L1177(lines 1177 1189) no Hoare annotation was computed. [2019-11-20 10:03:24,837 INFO L444 ceAbstractionStarter]: For program point L1177-2(lines 1177 1189) no Hoare annotation was computed. [2019-11-20 10:03:24,837 INFO L444 ceAbstractionStarter]: For program point L1177-4(lines 1177 1189) no Hoare annotation was computed. [2019-11-20 10:03:24,837 INFO L444 ceAbstractionStarter]: For program point L1177-6(lines 1177 1189) no Hoare annotation was computed. [2019-11-20 10:03:24,838 INFO L440 ceAbstractionStarter]: At program point L1970(lines 1957 2070) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,838 INFO L444 ceAbstractionStarter]: For program point L1177-8(lines 1177 1189) no Hoare annotation was computed. [2019-11-20 10:03:24,838 INFO L440 ceAbstractionStarter]: At program point L2631(lines 2626 2634) the Hoare annotation is: false [2019-11-20 10:03:24,838 INFO L444 ceAbstractionStarter]: For program point L1311(lines 1311 1315) no Hoare annotation was computed. [2019-11-20 10:03:24,838 INFO L444 ceAbstractionStarter]: For program point L1245(lines 1245 1276) no Hoare annotation was computed. [2019-11-20 10:03:24,838 INFO L444 ceAbstractionStarter]: For program point L1311-3(lines 1311 1315) no Hoare annotation was computed. [2019-11-20 10:03:24,838 INFO L444 ceAbstractionStarter]: For program point L1311-6(lines 1311 1315) no Hoare annotation was computed. [2019-11-20 10:03:24,838 INFO L444 ceAbstractionStarter]: For program point L1311-9(lines 1311 1315) no Hoare annotation was computed. [2019-11-20 10:03:24,838 INFO L444 ceAbstractionStarter]: For program point L1311-12(lines 1311 1315) no Hoare annotation was computed. [2019-11-20 10:03:24,838 INFO L447 ceAbstractionStarter]: At program point L2435-1(lines 2422 2440) the Hoare annotation is: true [2019-11-20 10:03:24,838 INFO L440 ceAbstractionStarter]: At program point L2435(lines 2422 2440) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-11-20 10:03:24,838 INFO L444 ceAbstractionStarter]: For program point L1246(lines 1246 1257) no Hoare annotation was computed. [2019-11-20 10:03:24,838 INFO L444 ceAbstractionStarter]: For program point L1180(lines 1180 1188) no Hoare annotation was computed. [2019-11-20 10:03:24,839 INFO L444 ceAbstractionStarter]: For program point L1180-2(lines 1180 1188) no Hoare annotation was computed. [2019-11-20 10:03:24,839 INFO L444 ceAbstractionStarter]: For program point L1114(lines 1114 1120) no Hoare annotation was computed. [2019-11-20 10:03:24,839 INFO L444 ceAbstractionStarter]: For program point L1114-1(lines 1114 1120) no Hoare annotation was computed. [2019-11-20 10:03:24,839 INFO L444 ceAbstractionStarter]: For program point L1180-4(lines 1180 1188) no Hoare annotation was computed. [2019-11-20 10:03:24,839 INFO L444 ceAbstractionStarter]: For program point L1114-2(lines 1114 1120) no Hoare annotation was computed. [2019-11-20 10:03:24,839 INFO L444 ceAbstractionStarter]: For program point L2039(lines 2039 2046) no Hoare annotation was computed. [2019-11-20 10:03:24,839 INFO L444 ceAbstractionStarter]: For program point L1114-3(lines 1114 1120) no Hoare annotation was computed. [2019-11-20 10:03:24,839 INFO L444 ceAbstractionStarter]: For program point L1180-6(lines 1180 1188) no Hoare annotation was computed. [2019-11-20 10:03:24,839 INFO L444 ceAbstractionStarter]: For program point L1180-8(lines 1180 1188) no Hoare annotation was computed. [2019-11-20 10:03:24,839 INFO L444 ceAbstractionStarter]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-11-20 10:03:24,839 INFO L440 ceAbstractionStarter]: At program point L2172(lines 2159 2177) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-11-20 10:03:24,839 INFO L447 ceAbstractionStarter]: At program point L2172-1(lines 2159 2177) the Hoare annotation is: true [2019-11-20 10:03:24,839 INFO L444 ceAbstractionStarter]: For program point L1446(lines 1446 1482) no Hoare annotation was computed. [2019-11-20 10:03:24,840 INFO L444 ceAbstractionStarter]: For program point L1446-1(lines 1446 1482) no Hoare annotation was computed. [2019-11-20 10:03:24,840 INFO L444 ceAbstractionStarter]: For program point L1446-2(lines 1446 1482) no Hoare annotation was computed. [2019-11-20 10:03:24,840 INFO L444 ceAbstractionStarter]: For program point L1446-3(lines 1446 1482) no Hoare annotation was computed. [2019-11-20 10:03:24,840 INFO L444 ceAbstractionStarter]: For program point L1446-4(lines 1446 1482) no Hoare annotation was computed. [2019-11-20 10:03:24,840 INFO L444 ceAbstractionStarter]: For program point L1975(lines 1975 1982) no Hoare annotation was computed. [2019-11-20 10:03:24,840 INFO L444 ceAbstractionStarter]: For program point L1447(lines 1447 1455) no Hoare annotation was computed. [2019-11-20 10:03:24,840 INFO L440 ceAbstractionStarter]: At program point L1381(lines 1334 1387) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,841 INFO L444 ceAbstractionStarter]: For program point L1447-2(lines 1447 1455) no Hoare annotation was computed. [2019-11-20 10:03:24,841 INFO L444 ceAbstractionStarter]: For program point L1447-4(lines 1447 1455) no Hoare annotation was computed. [2019-11-20 10:03:24,841 INFO L444 ceAbstractionStarter]: For program point L1447-6(lines 1447 1455) no Hoare annotation was computed. [2019-11-20 10:03:24,841 INFO L444 ceAbstractionStarter]: For program point L1183(lines 1183 1187) no Hoare annotation was computed. [2019-11-20 10:03:24,841 INFO L444 ceAbstractionStarter]: For program point L1447-8(lines 1447 1455) no Hoare annotation was computed. [2019-11-20 10:03:24,841 INFO L440 ceAbstractionStarter]: At program point L1183-2(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,842 INFO L444 ceAbstractionStarter]: For program point L1183-3(lines 1183 1187) no Hoare annotation was computed. [2019-11-20 10:03:24,842 INFO L440 ceAbstractionStarter]: At program point L1183-5(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,842 INFO L444 ceAbstractionStarter]: For program point L1183-6(lines 1183 1187) no Hoare annotation was computed. [2019-11-20 10:03:24,842 INFO L440 ceAbstractionStarter]: At program point L1183-8(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,842 INFO L444 ceAbstractionStarter]: For program point L1183-9(lines 1183 1187) no Hoare annotation was computed. [2019-11-20 10:03:24,842 INFO L440 ceAbstractionStarter]: At program point L1183-11(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,842 INFO L444 ceAbstractionStarter]: For program point L1183-12(lines 1183 1187) no Hoare annotation was computed. [2019-11-20 10:03:24,842 INFO L440 ceAbstractionStarter]: At program point L1183-14(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,843 INFO L444 ceAbstractionStarter]: For program point L1250(lines 1250 1256) no Hoare annotation was computed. [2019-11-20 10:03:24,843 INFO L444 ceAbstractionStarter]: For program point L1911(lines 1910 2074) no Hoare annotation was computed. [2019-11-20 10:03:24,843 INFO L440 ceAbstractionStarter]: At program point L1119(lines 1102 1125) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ~bob~0 1) (not (= ULTIMATE.start_setClientId_~handle 2)) (= ULTIMATE.start_getClientPrivateKey_~handle 1) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_outgoing_~client 1) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (= ~__ste_email_isSigned0~0 0) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2019-11-20 10:03:24,843 INFO L440 ceAbstractionStarter]: At program point L1119-1(lines 1102 1125) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ~bob~0 1) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= ~__ste_client_privateKey0~0 0)) (= ULTIMATE.start_getClientPrivateKey_~handle 1) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_outgoing_~client 1) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_createEmail_#res| 1) (= ULTIMATE.start_isSigned_~handle 1) (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2019-11-20 10:03:24,843 INFO L440 ceAbstractionStarter]: At program point L1119-2(lines 1102 1125) the Hoare annotation is: false [2019-11-20 10:03:24,843 INFO L440 ceAbstractionStarter]: At program point L1119-3(lines 1102 1125) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_createEmail_#res| 1) (not (= ~__ste_client_privateKey0~0 0)) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,844 INFO L444 ceAbstractionStarter]: For program point L1912(lines 1912 1916) no Hoare annotation was computed. [2019-11-20 10:03:24,844 INFO L444 ceAbstractionStarter]: For program point L1450(lines 1450 1454) no Hoare annotation was computed. [2019-11-20 10:03:24,844 INFO L444 ceAbstractionStarter]: For program point L1450-3(lines 1450 1454) no Hoare annotation was computed. [2019-11-20 10:03:24,844 INFO L444 ceAbstractionStarter]: For program point L1450-6(lines 1450 1454) no Hoare annotation was computed. [2019-11-20 10:03:24,844 INFO L444 ceAbstractionStarter]: For program point L1450-9(lines 1450 1454) no Hoare annotation was computed. [2019-11-20 10:03:24,844 INFO L444 ceAbstractionStarter]: For program point L63(lines 63 76) no Hoare annotation was computed. [2019-11-20 10:03:24,844 INFO L444 ceAbstractionStarter]: For program point L1450-12(lines 1450 1454) no Hoare annotation was computed. [2019-11-20 10:03:24,845 INFO L440 ceAbstractionStarter]: At program point L63-1(lines 54 79) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_outgoing_~client 1)) (.cse1 (= 1 ~queue_empty~0)) (.cse2 (= ~bob~0 1)) (.cse3 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7)) (.cse4 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse5 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse6 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse7 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse9 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse8 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse10 (= ULTIMATE.start_isSigned_~handle 1)) (.cse11 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse12 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse13 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse14 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (and .cse6 .cse7 .cse8 (and (= ~__ste_email_isSigned0~0 0) .cse9) .cse10 .cse11) .cse12 .cse13 .cse14) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (let ((.cse15 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse16 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse6 .cse7 .cse15 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse9 .cse8 .cse16 .cse10 .cse11) (and .cse6 .cse7 .cse15 .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse8 .cse16 .cse10 .cse11))) .cse12 .cse13 .cse14))) [2019-11-20 10:03:24,845 INFO L444 ceAbstractionStarter]: For program point L63-2(lines 63 76) no Hoare annotation was computed. [2019-11-20 10:03:24,845 INFO L447 ceAbstractionStarter]: At program point L63-3(lines 54 79) the Hoare annotation is: true [2019-11-20 10:03:24,845 INFO L440 ceAbstractionStarter]: At program point L2640(lines 2635 2643) the Hoare annotation is: false [2019-11-20 10:03:24,845 INFO L444 ceAbstractionStarter]: For program point L-1(line -1) no Hoare annotation was computed. [2019-11-20 10:03:24,845 INFO L444 ceAbstractionStarter]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1866) no Hoare annotation was computed. [2019-11-20 10:03:24,846 INFO L440 ceAbstractionStarter]: At program point L2048(lines 2035 2064) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,846 INFO L440 ceAbstractionStarter]: At program point L2841(lines 2830 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,846 INFO L444 ceAbstractionStarter]: For program point L2445(lines 2445 2453) no Hoare annotation was computed. [2019-11-20 10:03:24,846 INFO L444 ceAbstractionStarter]: For program point L2445-2(lines 2445 2453) no Hoare annotation was computed. [2019-11-20 10:03:24,846 INFO L444 ceAbstractionStarter]: For program point L67(lines 67 73) no Hoare annotation was computed. [2019-11-20 10:03:24,846 INFO L444 ceAbstractionStarter]: For program point L67-2(lines 67 73) no Hoare annotation was computed. [2019-11-20 10:03:24,847 INFO L444 ceAbstractionStarter]: For program point L2182(lines 2182 2190) no Hoare annotation was computed. [2019-11-20 10:03:24,847 INFO L444 ceAbstractionStarter]: For program point L2182-2(lines 2182 2190) no Hoare annotation was computed. [2019-11-20 10:03:24,847 INFO L444 ceAbstractionStarter]: For program point L2182-4(lines 2182 2190) no Hoare annotation was computed. [2019-11-20 10:03:24,847 INFO L440 ceAbstractionStarter]: At program point L1984(lines 1971 2069) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,847 INFO L444 ceAbstractionStarter]: For program point L1918(lines 1918 2073) no Hoare annotation was computed. [2019-11-20 10:03:24,847 INFO L444 ceAbstractionStarter]: For program point L1457(lines 1457 1481) no Hoare annotation was computed. [2019-11-20 10:03:24,847 INFO L444 ceAbstractionStarter]: For program point L2448(lines 2448 2452) no Hoare annotation was computed. [2019-11-20 10:03:24,848 INFO L444 ceAbstractionStarter]: For program point L1457-1(lines 1457 1481) no Hoare annotation was computed. [2019-11-20 10:03:24,848 INFO L444 ceAbstractionStarter]: For program point L1457-2(lines 1457 1481) no Hoare annotation was computed. [2019-11-20 10:03:24,848 INFO L440 ceAbstractionStarter]: At program point L2448-2(lines 1 2844) the Hoare annotation is: (let ((.cse3 (= ULTIMATE.start_outgoing_~client 1)) (.cse0 (= ~bob~0 1)) (.cse5 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse2 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse6 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse8 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse1 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse7 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse0 (not (= ~__ste_client_privateKey0~0 0)) .cse1 .cse2 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse3 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse3 (= 1 ~queue_empty~0) .cse0 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) .cse5 (and .cse2 (= ~__ste_email_isSigned0~0 0) .cse4 .cse6 .cse8) .cse1 .cse7))) [2019-11-20 10:03:24,848 INFO L444 ceAbstractionStarter]: For program point L1457-3(lines 1457 1481) no Hoare annotation was computed. [2019-11-20 10:03:24,848 INFO L444 ceAbstractionStarter]: For program point L1457-4(lines 1457 1481) no Hoare annotation was computed. [2019-11-20 10:03:24,848 INFO L444 ceAbstractionStarter]: For program point L2448-3(lines 2448 2452) no Hoare annotation was computed. [2019-11-20 10:03:24,849 INFO L444 ceAbstractionStarter]: For program point L1259(lines 1259 1275) no Hoare annotation was computed. [2019-11-20 10:03:24,849 INFO L440 ceAbstractionStarter]: At program point L2448-5(lines 1 2844) the Hoare annotation is: false [2019-11-20 10:03:24,849 INFO L444 ceAbstractionStarter]: For program point L2713-1(lines 2713 2724) no Hoare annotation was computed. [2019-11-20 10:03:24,849 INFO L444 ceAbstractionStarter]: For program point L2713(lines 2713 2724) no Hoare annotation was computed. [2019-11-20 10:03:24,849 INFO L444 ceAbstractionStarter]: For program point L1458(lines 1458 1466) no Hoare annotation was computed. [2019-11-20 10:03:24,849 INFO L444 ceAbstractionStarter]: For program point L1458-2(lines 1458 1466) no Hoare annotation was computed. [2019-11-20 10:03:24,849 INFO L444 ceAbstractionStarter]: For program point L1392(lines 1392 1438) no Hoare annotation was computed. [2019-11-20 10:03:24,850 INFO L444 ceAbstractionStarter]: For program point L1392-1(lines 1392 1438) no Hoare annotation was computed. [2019-11-20 10:03:24,850 INFO L444 ceAbstractionStarter]: For program point L1458-4(lines 1458 1466) no Hoare annotation was computed. [2019-11-20 10:03:24,850 INFO L444 ceAbstractionStarter]: For program point L1260(lines 1260 1271) no Hoare annotation was computed. [2019-11-20 10:03:24,850 INFO L444 ceAbstractionStarter]: For program point L1458-6(lines 1458 1466) no Hoare annotation was computed. [2019-11-20 10:03:24,850 INFO L444 ceAbstractionStarter]: For program point L1458-8(lines 1458 1466) no Hoare annotation was computed. [2019-11-20 10:03:24,850 INFO L444 ceAbstractionStarter]: For program point L2185(lines 2185 2189) no Hoare annotation was computed. [2019-11-20 10:03:24,850 INFO L444 ceAbstractionStarter]: For program point L2185-3(lines 2185 2189) no Hoare annotation was computed. [2019-11-20 10:03:24,851 INFO L440 ceAbstractionStarter]: At program point L2185-2(lines 2178 2193) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,851 INFO L444 ceAbstractionStarter]: For program point L2053(lines 2053 2060) no Hoare annotation was computed. [2019-11-20 10:03:24,851 INFO L440 ceAbstractionStarter]: At program point L2185-5(lines 2178 2193) the Hoare annotation is: (let ((.cse4 (= ULTIMATE.start_outgoing_~client 1)) (.cse1 (= ~bob~0 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse8 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse10 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse7 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse9 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse1 (not (= ~__ste_client_privateKey0~0 0)) .cse2 .cse3 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse4 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse4 (= 1 ~queue_empty~0) .cse1 (and .cse3 .cse0 (= ~__ste_email_isSigned0~0 0) .cse5 .cse8 .cse10) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) .cse6 .cse7 .cse2 .cse9))) [2019-11-20 10:03:24,851 INFO L440 ceAbstractionStarter]: At program point L2053-1(lines 1910 2074) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,851 INFO L444 ceAbstractionStarter]: For program point L2185-6(lines 2185 2189) no Hoare annotation was computed. [2019-11-20 10:03:24,852 INFO L440 ceAbstractionStarter]: At program point L2185-8(lines 2178 2193) the Hoare annotation is: false [2019-11-20 10:03:24,852 INFO L444 ceAbstractionStarter]: For program point L1393(lines 1393 1404) no Hoare annotation was computed. [2019-11-20 10:03:24,852 INFO L444 ceAbstractionStarter]: For program point L1393-1(lines 1393 1404) no Hoare annotation was computed. [2019-11-20 10:03:24,852 INFO L444 ceAbstractionStarter]: For program point L1922(lines 1922 1929) no Hoare annotation was computed. [2019-11-20 10:03:24,852 INFO L444 ceAbstractionStarter]: For program point L1130(lines 1130 1142) no Hoare annotation was computed. [2019-11-20 10:03:24,852 INFO L444 ceAbstractionStarter]: For program point L1130-2(lines 1130 1142) no Hoare annotation was computed. [2019-11-20 10:03:24,852 INFO L444 ceAbstractionStarter]: For program point L1130-4(lines 1130 1142) no Hoare annotation was computed. [2019-11-20 10:03:24,853 INFO L444 ceAbstractionStarter]: For program point L1989(lines 1989 1993) no Hoare annotation was computed. [2019-11-20 10:03:24,853 INFO L444 ceAbstractionStarter]: For program point L1130-6(lines 1130 1142) no Hoare annotation was computed. [2019-11-20 10:03:24,853 INFO L444 ceAbstractionStarter]: For program point L1130-8(lines 1130 1142) no Hoare annotation was computed. [2019-11-20 10:03:24,853 INFO L444 ceAbstractionStarter]: For program point L1130-10(lines 1130 1142) no Hoare annotation was computed. [2019-11-20 10:03:24,853 INFO L440 ceAbstractionStarter]: At program point L1725(lines 1705 1727) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ~bob~0 1) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_isSigned0~0 0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 2)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,853 INFO L444 ceAbstractionStarter]: For program point L1461(lines 1461 1465) no Hoare annotation was computed. [2019-11-20 10:03:24,854 INFO L444 ceAbstractionStarter]: For program point L1461-3(lines 1461 1465) no Hoare annotation was computed. [2019-11-20 10:03:24,854 INFO L444 ceAbstractionStarter]: For program point L1461-6(lines 1461 1465) no Hoare annotation was computed. [2019-11-20 10:03:24,854 INFO L444 ceAbstractionStarter]: For program point L1461-9(lines 1461 1465) no Hoare annotation was computed. [2019-11-20 10:03:24,854 INFO L444 ceAbstractionStarter]: For program point L1461-12(lines 1461 1465) no Hoare annotation was computed. [2019-11-20 10:03:24,854 INFO L444 ceAbstractionStarter]: For program point L2717-1(lines 2713 2724) no Hoare annotation was computed. [2019-11-20 10:03:24,854 INFO L444 ceAbstractionStarter]: For program point L2717(lines 2717 2721) no Hoare annotation was computed. [2019-11-20 10:03:24,854 INFO L444 ceAbstractionStarter]: For program point L2717-3(lines 2713 2724) no Hoare annotation was computed. [2019-11-20 10:03:24,855 INFO L444 ceAbstractionStarter]: For program point L2717-2(lines 2717 2721) no Hoare annotation was computed. [2019-11-20 10:03:24,855 INFO L444 ceAbstractionStarter]: For program point L1264(lines 1264 1270) no Hoare annotation was computed. [2019-11-20 10:03:24,855 INFO L444 ceAbstractionStarter]: For program point L1397(lines 1397 1403) no Hoare annotation was computed. [2019-11-20 10:03:24,855 INFO L444 ceAbstractionStarter]: For program point L1397-1(lines 1397 1403) no Hoare annotation was computed. [2019-11-20 10:03:24,855 INFO L444 ceAbstractionStarter]: For program point L1133(lines 1133 1141) no Hoare annotation was computed. [2019-11-20 10:03:24,855 INFO L444 ceAbstractionStarter]: For program point L1133-2(lines 1133 1141) no Hoare annotation was computed. [2019-11-20 10:03:24,855 INFO L444 ceAbstractionStarter]: For program point L1133-4(lines 1133 1141) no Hoare annotation was computed. [2019-11-20 10:03:24,856 INFO L444 ceAbstractionStarter]: For program point L1133-6(lines 1133 1141) no Hoare annotation was computed. [2019-11-20 10:03:24,856 INFO L444 ceAbstractionStarter]: For program point L1133-8(lines 1133 1141) no Hoare annotation was computed. [2019-11-20 10:03:24,856 INFO L444 ceAbstractionStarter]: For program point L1133-10(lines 1133 1141) no Hoare annotation was computed. [2019-11-20 10:03:24,856 INFO L444 ceAbstractionStarter]: For program point L2653-1(lines 2653 2663) no Hoare annotation was computed. [2019-11-20 10:03:24,856 INFO L444 ceAbstractionStarter]: For program point L2653(lines 2653 2663) no Hoare annotation was computed. [2019-11-20 10:03:24,856 INFO L444 ceAbstractionStarter]: For program point L2389-1(lines 2389 2400) no Hoare annotation was computed. [2019-11-20 10:03:24,856 INFO L444 ceAbstractionStarter]: For program point L2389(lines 2389 2400) no Hoare annotation was computed. [2019-11-20 10:03:24,856 INFO L444 ceAbstractionStarter]: For program point L2389-3(lines 2389 2400) no Hoare annotation was computed. [2019-11-20 10:03:24,857 INFO L444 ceAbstractionStarter]: For program point L2389-2(lines 2389 2400) no Hoare annotation was computed. [2019-11-20 10:03:24,857 INFO L444 ceAbstractionStarter]: For program point L1136(lines 1136 1140) no Hoare annotation was computed. [2019-11-20 10:03:24,857 INFO L440 ceAbstractionStarter]: At program point L1136-2(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-11-20 10:03:24,857 INFO L444 ceAbstractionStarter]: For program point L1136-3(lines 1136 1140) no Hoare annotation was computed. [2019-11-20 10:03:24,857 INFO L440 ceAbstractionStarter]: At program point L1136-5(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_setClientId_~handle 2) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_rjh_~rjh___0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-11-20 10:03:24,858 INFO L440 ceAbstractionStarter]: At program point L1995(lines 1985 2068) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,858 INFO L444 ceAbstractionStarter]: For program point L1136-6(lines 1136 1140) no Hoare annotation was computed. [2019-11-20 10:03:24,858 INFO L440 ceAbstractionStarter]: At program point L1136-8(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ~bob~0 1) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_isSigned0~0 0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 2)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,858 INFO L444 ceAbstractionStarter]: For program point L1136-9(lines 1136 1140) no Hoare annotation was computed. [2019-11-20 10:03:24,858 INFO L440 ceAbstractionStarter]: At program point L1136-11(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,858 INFO L444 ceAbstractionStarter]: For program point L1136-12(lines 1136 1140) no Hoare annotation was computed. [2019-11-20 10:03:24,859 INFO L440 ceAbstractionStarter]: At program point L1136-14(lines 1851 1860) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,859 INFO L444 ceAbstractionStarter]: For program point L1136-15(lines 1136 1140) no Hoare annotation was computed. [2019-11-20 10:03:24,859 INFO L440 ceAbstractionStarter]: At program point L1136-17(lines 1841 1850) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,859 INFO L444 ceAbstractionStarter]: For program point L2657-1(lines 2657 2662) no Hoare annotation was computed. [2019-11-20 10:03:24,859 INFO L444 ceAbstractionStarter]: For program point L2657(lines 2657 2662) no Hoare annotation was computed. [2019-11-20 10:03:24,859 INFO L444 ceAbstractionStarter]: For program point L1468(lines 1468 1480) no Hoare annotation was computed. [2019-11-20 10:03:24,860 INFO L440 ceAbstractionStarter]: At program point L1468-1(lines 1442 1485) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,860 INFO L444 ceAbstractionStarter]: For program point L1468-2(lines 1468 1480) no Hoare annotation was computed. [2019-11-20 10:03:24,860 INFO L440 ceAbstractionStarter]: At program point L1468-3(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,860 INFO L444 ceAbstractionStarter]: For program point L2393-1(lines 2393 2399) no Hoare annotation was computed. [2019-11-20 10:03:24,860 INFO L444 ceAbstractionStarter]: For program point L1468-4(lines 1468 1480) no Hoare annotation was computed. [2019-11-20 10:03:24,860 INFO L444 ceAbstractionStarter]: For program point L2393(lines 2393 2399) no Hoare annotation was computed. [2019-11-20 10:03:24,861 INFO L440 ceAbstractionStarter]: At program point L1468-5(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,861 INFO L444 ceAbstractionStarter]: For program point L2393-3(lines 2393 2399) no Hoare annotation was computed. [2019-11-20 10:03:24,861 INFO L444 ceAbstractionStarter]: For program point L1468-6(lines 1468 1480) no Hoare annotation was computed. [2019-11-20 10:03:24,861 INFO L444 ceAbstractionStarter]: For program point L2393-2(lines 2393 2399) no Hoare annotation was computed. [2019-11-20 10:03:24,861 INFO L440 ceAbstractionStarter]: At program point L1468-7(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,861 INFO L444 ceAbstractionStarter]: For program point L1204(lines 1204 1214) no Hoare annotation was computed. [2019-11-20 10:03:24,862 INFO L444 ceAbstractionStarter]: For program point L1468-8(lines 1468 1480) no Hoare annotation was computed. [2019-11-20 10:03:24,862 INFO L444 ceAbstractionStarter]: For program point L1204-1(lines 1204 1214) no Hoare annotation was computed. [2019-11-20 10:03:24,862 INFO L440 ceAbstractionStarter]: At program point L1468-9(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,862 INFO L444 ceAbstractionStarter]: For program point L1204-2(lines 1204 1214) no Hoare annotation was computed. [2019-11-20 10:03:24,862 INFO L444 ceAbstractionStarter]: For program point L1204-3(lines 1204 1214) no Hoare annotation was computed. [2019-11-20 10:03:24,862 INFO L444 ceAbstractionStarter]: For program point L1204-4(lines 1204 1214) no Hoare annotation was computed. [2019-11-20 10:03:24,862 INFO L440 ceAbstractionStarter]: At program point L1931(lines 1918 2073) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,863 INFO L444 ceAbstractionStarter]: For program point L1469(lines 1469 1477) no Hoare annotation was computed. [2019-11-20 10:03:24,863 INFO L444 ceAbstractionStarter]: For program point L1469-2(lines 1469 1477) no Hoare annotation was computed. [2019-11-20 10:03:24,863 INFO L444 ceAbstractionStarter]: For program point L1469-4(lines 1469 1477) no Hoare annotation was computed. [2019-11-20 10:03:24,863 INFO L444 ceAbstractionStarter]: For program point L1469-6(lines 1469 1477) no Hoare annotation was computed. [2019-11-20 10:03:24,863 INFO L444 ceAbstractionStarter]: For program point L1469-8(lines 1469 1477) no Hoare annotation was computed. [2019-11-20 10:03:24,863 INFO L444 ceAbstractionStarter]: For program point L1866(line 1866) no Hoare annotation was computed. [2019-11-20 10:03:24,863 INFO L444 ceAbstractionStarter]: For program point L1866-1(line 1866) no Hoare annotation was computed. [2019-11-20 10:03:24,864 INFO L444 ceAbstractionStarter]: For program point L1338(lines 1338 1384) no Hoare annotation was computed. [2019-11-20 10:03:24,864 INFO L444 ceAbstractionStarter]: For program point L1339(lines 1339 1350) no Hoare annotation was computed. [2019-11-20 10:03:24,864 INFO L444 ceAbstractionStarter]: For program point L2000(lines 2000 2007) no Hoare annotation was computed. [2019-11-20 10:03:24,864 INFO L444 ceAbstractionStarter]: For program point L1472(lines 1472 1476) no Hoare annotation was computed. [2019-11-20 10:03:24,864 INFO L444 ceAbstractionStarter]: For program point L1406(lines 1406 1437) no Hoare annotation was computed. [2019-11-20 10:03:24,864 INFO L444 ceAbstractionStarter]: For program point L1472-3(lines 1472 1476) no Hoare annotation was computed. [2019-11-20 10:03:24,864 INFO L444 ceAbstractionStarter]: For program point L1406-1(lines 1406 1437) no Hoare annotation was computed. [2019-11-20 10:03:24,865 INFO L440 ceAbstractionStarter]: At program point L1274(lines 1227 1280) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,865 INFO L444 ceAbstractionStarter]: For program point L1472-6(lines 1472 1476) no Hoare annotation was computed. [2019-11-20 10:03:24,865 INFO L444 ceAbstractionStarter]: For program point L1472-9(lines 1472 1476) no Hoare annotation was computed. [2019-11-20 10:03:24,865 INFO L444 ceAbstractionStarter]: For program point L1472-12(lines 1472 1476) no Hoare annotation was computed. [2019-11-20 10:03:24,865 INFO L440 ceAbstractionStarter]: At program point L2398(lines 2385 2403) the Hoare annotation is: (let ((.cse4 (= ULTIMATE.start_outgoing_~client 1)) (.cse1 (= ~bob~0 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse8 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse9 (= ULTIMATE.start_isSigned_~handle 1)) (.cse12 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse7 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse10 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse11 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse1 (not (= ~__ste_client_privateKey0~0 0)) .cse2 .cse3 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse4 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse4 (= 1 ~queue_empty~0) .cse1 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (and .cse3 .cse0 (= ~__ste_email_isSigned0~0 0) .cse5 .cse8 .cse9 (= |ULTIMATE.start_isSigned_#res| 0) .cse12) .cse6 .cse7 .cse2 .cse10 .cse11))) [2019-11-20 10:03:24,866 INFO L444 ceAbstractionStarter]: For program point L1407(lines 1407 1418) no Hoare annotation was computed. [2019-11-20 10:03:24,866 INFO L444 ceAbstractionStarter]: For program point L1407-1(lines 1407 1418) no Hoare annotation was computed. [2019-11-20 10:03:24,866 INFO L444 ceAbstractionStarter]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-11-20 10:03:24,866 INFO L440 ceAbstractionStarter]: At program point L2398-2(lines 2385 2403) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_isSigned_#res| 0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,866 INFO L440 ceAbstractionStarter]: At program point L2398-1(lines 2385 2403) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-11-20 10:03:24,867 INFO L447 ceAbstractionStarter]: At program point L2398-3(lines 2385 2403) the Hoare annotation is: true [2019-11-20 10:03:24,867 INFO L444 ceAbstractionStarter]: For program point L2200(lines 2200 2211) no Hoare annotation was computed. [2019-11-20 10:03:24,867 INFO L444 ceAbstractionStarter]: For program point L2200-1(lines 2200 2211) no Hoare annotation was computed. [2019-11-20 10:03:24,867 INFO L444 ceAbstractionStarter]: For program point L1936(lines 1936 1940) no Hoare annotation was computed. [2019-11-20 10:03:24,867 INFO L444 ceAbstractionStarter]: For program point L1738(lines 1738 1745) no Hoare annotation was computed. [2019-11-20 10:03:24,867 INFO L447 ceAbstractionStarter]: At program point L1738-1(lines 1738 1745) the Hoare annotation is: true [2019-11-20 10:03:24,867 INFO L444 ceAbstractionStarter]: For program point L2730(lines 2730 2744) no Hoare annotation was computed. [2019-11-20 10:03:24,868 INFO L444 ceAbstractionStarter]: For program point L2730-2(lines 2730 2744) no Hoare annotation was computed. [2019-11-20 10:03:24,868 INFO L440 ceAbstractionStarter]: At program point L2730-1(lines 2700 2747) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-11-20 10:03:24,868 INFO L447 ceAbstractionStarter]: At program point L2730-3(lines 2700 2747) the Hoare annotation is: true [2019-11-20 10:03:24,868 INFO L444 ceAbstractionStarter]: For program point L1541(lines 1541 1557) no Hoare annotation was computed. [2019-11-20 10:03:24,868 INFO L444 ceAbstractionStarter]: For program point L1541-1(lines 1541 1557) no Hoare annotation was computed. [2019-11-20 10:03:24,869 INFO L444 ceAbstractionStarter]: For program point L1343(lines 1343 1349) no Hoare annotation was computed. [2019-11-20 10:03:24,869 INFO L447 ceAbstractionStarter]: At program point L2665-1(lines 2644 2668) the Hoare annotation is: true [2019-11-20 10:03:24,869 INFO L440 ceAbstractionStarter]: At program point L2665(lines 2644 2668) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-11-20 10:03:24,869 INFO L444 ceAbstractionStarter]: For program point L1411(lines 1411 1417) no Hoare annotation was computed. [2019-11-20 10:03:24,869 INFO L444 ceAbstractionStarter]: For program point L1411-1(lines 1411 1417) no Hoare annotation was computed. [2019-11-20 10:03:24,869 INFO L440 ceAbstractionStarter]: At program point L1213(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,870 INFO L444 ceAbstractionStarter]: For program point L2204(lines 2204 2210) no Hoare annotation was computed. [2019-11-20 10:03:24,870 INFO L440 ceAbstractionStarter]: At program point L1213-1(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,870 INFO L440 ceAbstractionStarter]: At program point L1213-2(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,870 INFO L440 ceAbstractionStarter]: At program point L1213-3(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,870 INFO L444 ceAbstractionStarter]: For program point L2204-1(lines 2204 2210) no Hoare annotation was computed. [2019-11-20 10:03:24,871 INFO L440 ceAbstractionStarter]: At program point L1213-4(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,871 INFO L444 ceAbstractionStarter]: For program point L1545(lines 1545 1556) no Hoare annotation was computed. [2019-11-20 10:03:24,871 INFO L444 ceAbstractionStarter]: For program point L1545-1(lines 1545 1556) no Hoare annotation was computed. [2019-11-20 10:03:24,871 INFO L440 ceAbstractionStarter]: At program point L1942(lines 1932 2072) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,871 INFO L444 ceAbstractionStarter]: For program point L2735(lines 2735 2741) no Hoare annotation was computed. [2019-11-20 10:03:24,871 INFO L444 ceAbstractionStarter]: For program point L2735-2(lines 2735 2741) no Hoare annotation was computed. [2019-11-20 10:03:24,872 INFO L440 ceAbstractionStarter]: At program point L2075(lines 1909 2076) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,872 INFO L440 ceAbstractionStarter]: At program point L2009(lines 1996 2067) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-20 10:03:24,872 INFO L440 ceAbstractionStarter]: At program point L490(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~__ste_email_isSigned0~0 0)) [2019-11-20 10:03:24,872 INFO L444 ceAbstractionStarter]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-11-20 10:03:24,872 INFO L447 ceAbstractionStarter]: At program point L1746(lines 1728 1748) the Hoare annotation is: true [2019-11-20 10:03:24,872 INFO L447 ceAbstractionStarter]: At program point L2209-1(lines 2196 2214) the Hoare annotation is: true [2019-11-20 10:03:24,873 INFO L440 ceAbstractionStarter]: At program point L2209(lines 2196 2214) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_outgoing_~client 1)) (.cse1 (= 1 ~queue_empty~0)) (.cse2 (= ~bob~0 1)) (.cse3 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7)) (.cse4 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse5 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse6 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse7 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse9 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse8 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse10 (= ULTIMATE.start_isSigned_~handle 1)) (.cse11 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse12 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse13 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse14 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (and .cse6 .cse7 .cse8 (and (= ~__ste_email_isSigned0~0 0) .cse9) .cse10 .cse11) .cse12 .cse13 .cse14) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (let ((.cse15 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse16 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse6 .cse7 .cse15 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse9 .cse8 .cse16 .cse10 .cse11) (and .cse6 .cse7 .cse15 .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse8 .cse16 .cse10 .cse11))) .cse12 .cse13 .cse14))) [2019-11-20 10:03:24,873 INFO L444 ceAbstractionStarter]: For program point L1549(lines 1549 1555) no Hoare annotation was computed. [2019-11-20 10:03:24,873 INFO L444 ceAbstractionStarter]: For program point L1549-1(lines 1549 1555) no Hoare annotation was computed. [2019-11-20 10:03:24,873 INFO L444 ceAbstractionStarter]: For program point L2408(lines 2408 2416) no Hoare annotation was computed. [2019-11-20 10:03:24,873 INFO L444 ceAbstractionStarter]: For program point L2408-2(lines 2408 2416) no Hoare annotation was computed. [2019-11-20 10:03:24,873 INFO L444 ceAbstractionStarter]: For program point L1285(lines 1285 1321) no Hoare annotation was computed. [2019-11-20 10:03:24,874 INFO L444 ceAbstractionStarter]: For program point L1285-1(lines 1285 1321) no Hoare annotation was computed. [2019-11-20 10:03:24,874 INFO L444 ceAbstractionStarter]: For program point L1285-2(lines 1285 1321) no Hoare annotation was computed. [2019-11-20 10:03:24,874 INFO L444 ceAbstractionStarter]: For program point L1285-3(lines 1285 1321) no Hoare annotation was computed. [2019-11-20 10:03:24,874 INFO L444 ceAbstractionStarter]: For program point L1153(lines 1153 1169) no Hoare annotation was computed. [2019-11-20 10:03:24,874 INFO L444 ceAbstractionStarter]: For program point L1285-4(lines 1285 1321) no Hoare annotation was computed. [2019-11-20 10:03:24,874 INFO L444 ceAbstractionStarter]: For program point L1153-1(lines 1153 1169) no Hoare annotation was computed. [2019-11-20 10:03:24,874 INFO L444 ceAbstractionStarter]: For program point L1153-2(lines 1153 1169) no Hoare annotation was computed. [2019-11-20 10:03:24,874 INFO L444 ceAbstractionStarter]: For program point L1153-3(lines 1153 1169) no Hoare annotation was computed. [2019-11-20 10:03:24,875 INFO L444 ceAbstractionStarter]: For program point L1153-4(lines 1153 1169) no Hoare annotation was computed. [2019-11-20 10:03:24,875 INFO L444 ceAbstractionStarter]: For program point L1682(lines 1682 1690) no Hoare annotation was computed. [2019-11-20 10:03:24,875 INFO L444 ceAbstractionStarter]: For program point L1352(lines 1352 1383) no Hoare annotation was computed. [2019-11-20 10:03:24,875 INFO L444 ceAbstractionStarter]: For program point L1286(lines 1286 1294) no Hoare annotation was computed. [2019-11-20 10:03:24,875 INFO L444 ceAbstractionStarter]: For program point L1286-2(lines 1286 1294) no Hoare annotation was computed. [2019-11-20 10:03:24,875 INFO L444 ceAbstractionStarter]: For program point L1286-4(lines 1286 1294) no Hoare annotation was computed. [2019-11-20 10:03:24,875 INFO L444 ceAbstractionStarter]: For program point L1286-6(lines 1286 1294) no Hoare annotation was computed. [2019-11-20 10:03:24,876 INFO L444 ceAbstractionStarter]: For program point L1286-8(lines 1286 1294) no Hoare annotation was computed. [2019-11-20 10:03:24,876 INFO L444 ceAbstractionStarter]: For program point L1947(lines 1947 1954) no Hoare annotation was computed. [2019-11-20 10:03:24,876 INFO L444 ceAbstractionStarter]: For program point L1353(lines 1353 1364) no Hoare annotation was computed. [2019-11-20 10:03:24,876 INFO L444 ceAbstractionStarter]: For program point L2014(lines 2014 2018) no Hoare annotation was computed. [2019-11-20 10:03:24,876 INFO L444 ceAbstractionStarter]: For program point L1420(lines 1420 1436) no Hoare annotation was computed. [2019-11-20 10:03:24,876 INFO L444 ceAbstractionStarter]: For program point L1420-1(lines 1420 1436) no Hoare annotation was computed. [2019-11-20 10:03:24,876 INFO L444 ceAbstractionStarter]: For program point L2411(lines 2411 2415) no Hoare annotation was computed. [2019-11-20 10:03:24,877 INFO L444 ceAbstractionStarter]: For program point L2411-3(lines 2411 2415) no Hoare annotation was computed. [2019-11-20 10:03:24,877 INFO L440 ceAbstractionStarter]: At program point L2411-2(lines 2404 2419) the Hoare annotation is: (and (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ~bob~0 1) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= ~__ste_client_privateKey0~0 0)) (= ULTIMATE.start_getClientPrivateKey_~handle 1) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_outgoing_~client 1) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2019-11-20 10:03:24,877 INFO L440 ceAbstractionStarter]: At program point L2411-5(lines 2404 2419) the Hoare annotation is: false [2019-11-20 10:03:24,877 INFO L444 ceAbstractionStarter]: For program point L1421(lines 1421 1432) no Hoare annotation was computed. [2019-11-20 10:03:24,877 INFO L444 ceAbstractionStarter]: For program point L1421-1(lines 1421 1432) no Hoare annotation was computed. [2019-11-20 10:03:24,877 INFO L444 ceAbstractionStarter]: For program point L1289(lines 1289 1293) no Hoare annotation was computed. [2019-11-20 10:03:24,878 INFO L444 ceAbstractionStarter]: For program point L1289-3(lines 1289 1293) no Hoare annotation was computed. [2019-11-20 10:03:24,878 INFO L444 ceAbstractionStarter]: For program point L1157(lines 1157 1168) no Hoare annotation was computed. [2019-11-20 10:03:24,878 INFO L444 ceAbstractionStarter]: For program point L1157-1(lines 1157 1168) no Hoare annotation was computed. [2019-11-20 10:03:24,878 INFO L444 ceAbstractionStarter]: For program point L1157-2(lines 1157 1168) no Hoare annotation was computed. [2019-11-20 10:03:24,878 INFO L444 ceAbstractionStarter]: For program point L1289-6(lines 1289 1293) no Hoare annotation was computed. [2019-11-20 10:03:24,878 INFO L444 ceAbstractionStarter]: For program point L1157-3(lines 1157 1168) no Hoare annotation was computed. [2019-11-20 10:03:24,878 INFO L444 ceAbstractionStarter]: For program point L1157-4(lines 1157 1168) no Hoare annotation was computed. [2019-11-20 10:03:24,878 INFO L444 ceAbstractionStarter]: For program point L1289-9(lines 1289 1293) no Hoare annotation was computed. [2019-11-20 10:03:24,879 INFO L444 ceAbstractionStarter]: For program point L1289-12(lines 1289 1293) no Hoare annotation was computed. [2019-11-20 10:03:24,879 INFO L440 ceAbstractionStarter]: At program point L1554(lines 1537 1560) the Hoare annotation is: (let ((.cse4 (= ULTIMATE.start_outgoing_~client 1)) (.cse1 (= ~bob~0 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse8 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse10 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse7 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse9 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse1 (not (= ~__ste_client_privateKey0~0 0)) .cse2 .cse3 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse4 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse4 (= 1 ~queue_empty~0) .cse1 (and .cse3 .cse0 (= ~__ste_email_isSigned0~0 0) .cse5 .cse8 .cse10) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) .cse6 .cse7 .cse2 .cse9))) [2019-11-20 10:03:24,879 INFO L440 ceAbstractionStarter]: At program point L1554-1(lines 1537 1560) the Hoare annotation is: false [2019-11-20 10:03:24,936 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 10:03:24 BoogieIcfgContainer [2019-11-20 10:03:24,936 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-11-20 10:03:24,936 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-11-20 10:03:24,936 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-11-20 10:03:24,937 INFO L275 PluginConnector]: Witness Printer initialized [2019-11-20 10:03:24,937 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:03:08" (3/4) ... [2019-11-20 10:03:24,940 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-11-20 10:03:24,972 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 133 nodes and edges [2019-11-20 10:03:24,976 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 75 nodes and edges [2019-11-20 10:03:24,979 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2019-11-20 10:03:24,982 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2019-11-20 10:03:24,986 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-11-20 10:03:25,017 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (1 == queue_empty && __ste_email_isSigned0 == 0) && \result == queue_empty [2019-11-20 10:03:25,017 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty [2019-11-20 10:03:25,018 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty [2019-11-20 10:03:25,018 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && handle == 2) && handle == rjh___0) && \result == queue_empty [2019-11-20 10:03:25,018 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && handle == 2) && !(handle == 1)) && handle == rjh___0) && \result == queue_empty [2019-11-20 10:03:25,019 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,019 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 2)) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,019 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 2)) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,020 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,020 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,020 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,020 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,021 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,021 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,021 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,021 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,022 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,022 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,022 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,022 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,023 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,023 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,024 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) [2019-11-20 10:03:25,024 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,024 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) [2019-11-20 10:03:25,025 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,025 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,025 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,025 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) [2019-11-20 10:03:25,026 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,026 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,026 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,027 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,027 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,027 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,027 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,027 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,028 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,028 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,028 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,028 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,028 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,029 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,029 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,029 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((handle == chuck___0 && bob == 1) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && __ste_email_isSigned0 == 0) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg [2019-11-20 10:03:25,030 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,030 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,030 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,030 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,030 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,031 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((privkey == __ste_client_privateKey0 && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || (((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && 1 == sender) && (((1 == msg && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) && handle == 1) && \result == queue_empty) [2019-11-20 10:03:25,031 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,031 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,031 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((privkey == __ste_client_privateKey0 && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg [2019-11-20 10:03:25,032 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,032 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && client == 1) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || ((((((((client == 1 && 1 == queue_empty) && bob == 1) && ((((1 == msg && 1 == msg) && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) && queue_empty == tmp) && client == 1) && 1 == sender) && handle == 1) && \result == queue_empty) [2019-11-20 10:03:25,032 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && client == 1) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || ((((((((client == 1 && 1 == queue_empty) && bob == 1) && ((((1 == msg && 1 == msg) && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) && queue_empty == tmp) && client == 1) && 1 == sender) && handle == 1) && \result == queue_empty) [2019-11-20 10:03:25,033 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,033 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-20 10:03:25,033 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && ((((((1 == msg && 1 == msg) && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && handle == 1) && \result == 0) && 1 == msg) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) [2019-11-20 10:03:25,033 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && ((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && handle == 1) && 1 == msg) && handle == 1) && client == 1) && \result == queue_empty) || (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && !(0 == tmp)) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && __ste_client_privateKey0 == \result) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg))) && handle == 1) && client == 1) && \result == queue_empty) [2019-11-20 10:03:25,034 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg [2019-11-20 10:03:25,034 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && ((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && handle == 1) && 1 == msg) && handle == 1) && client == 1) && \result == queue_empty) || (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && !(0 == tmp)) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && __ste_client_privateKey0 == \result) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg))) && handle == 1) && client == 1) && \result == queue_empty) [2019-11-20 10:03:25,034 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((bob == 1 && !(\result == 0)) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && !(0 == tmp)) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && __ste_client_privateKey0 == \result) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg))) && handle == 1) && \result == 1) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) || ((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && handle == 1) && 1 == msg) && client == 1) && \result == queue_empty) [2019-11-20 10:03:25,034 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-11-20 10:03:25,034 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-11-20 10:03:25,035 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-11-20 10:03:25,035 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((bob == 1 && !(\result == 0)) && handle == 1) && !(0 == \result)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || ((((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && !(0 == \result)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-11-20 10:03:25,035 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-11-20 10:03:25,035 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-11-20 10:03:25,036 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-11-20 10:03:25,036 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-11-20 10:03:25,037 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && \result == 0) && !(1 == chuck___0) [2019-11-20 10:03:25,037 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((handle == chuck___0 && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0) [2019-11-20 10:03:25,162 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/run_dir_d499e9d1-172c-4b81-9641-b65041bb7756/bin/uautomizer/witness.graphml [2019-11-20 10:03:25,163 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-11-20 10:03:25,164 INFO L168 Benchmark]: Toolchain (without parser) took 20675.59 ms. Allocated memory was 1.0 GB in the beginning and 1.4 GB in the end (delta: 415.2 MB). Free memory was 946.1 MB in the beginning and 868.0 MB in the end (delta: 78.1 MB). Peak memory consumption was 493.4 MB. Max. memory is 11.5 GB. [2019-11-20 10:03:25,164 INFO L168 Benchmark]: CDTParser took 0.78 ms. Allocated memory is still 1.0 GB. Free memory is still 967.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-20 10:03:25,165 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1196.93 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 127.4 MB). Free memory was 946.1 MB in the beginning and 1.1 GB in the end (delta: -128.2 MB). Peak memory consumption was 30.2 MB. Max. memory is 11.5 GB. [2019-11-20 10:03:25,165 INFO L168 Benchmark]: Boogie Procedure Inliner took 187.58 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 13.8 MB). Peak memory consumption was 13.8 MB. Max. memory is 11.5 GB. [2019-11-20 10:03:25,165 INFO L168 Benchmark]: Boogie Preprocessor took 158.51 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.9 MB). Peak memory consumption was 6.9 MB. Max. memory is 11.5 GB. [2019-11-20 10:03:25,166 INFO L168 Benchmark]: RCFGBuilder took 2628.00 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 871.2 MB in the end (delta: 182.4 MB). Peak memory consumption was 182.4 MB. Max. memory is 11.5 GB. [2019-11-20 10:03:25,166 INFO L168 Benchmark]: TraceAbstraction took 16270.13 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 287.8 MB). Free memory was 871.2 MB in the beginning and 909.7 MB in the end (delta: -38.5 MB). Peak memory consumption was 374.2 MB. Max. memory is 11.5 GB. [2019-11-20 10:03:25,166 INFO L168 Benchmark]: Witness Printer took 226.67 ms. Allocated memory is still 1.4 GB. Free memory was 909.7 MB in the beginning and 868.0 MB in the end (delta: 41.7 MB). Peak memory consumption was 41.7 MB. Max. memory is 11.5 GB. [2019-11-20 10:03:25,168 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.78 ms. Allocated memory is still 1.0 GB. Free memory is still 967.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1196.93 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 127.4 MB). Free memory was 946.1 MB in the beginning and 1.1 GB in the end (delta: -128.2 MB). Peak memory consumption was 30.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 187.58 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 13.8 MB). Peak memory consumption was 13.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 158.51 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.9 MB). Peak memory consumption was 6.9 MB. Max. memory is 11.5 GB. * RCFGBuilder took 2628.00 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 871.2 MB in the end (delta: 182.4 MB). Peak memory consumption was 182.4 MB. Max. memory is 11.5 GB. * TraceAbstraction took 16270.13 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 287.8 MB). Free memory was 871.2 MB in the beginning and 909.7 MB in the end (delta: -38.5 MB). Peak memory consumption was 374.2 MB. Max. memory is 11.5 GB. * Witness Printer took 226.67 ms. Allocated memory is still 1.4 GB. Free memory was 909.7 MB in the beginning and 868.0 MB in the end (delta: 41.7 MB). Peak memory consumption was 41.7 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 1866]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 1866]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 2 specifications checked. All of them hold - InvariantResult [Line: 2422]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 2830]: Loop Invariant Derived loop invariant: ((((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2422]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2617]: Loop Invariant Derived loop invariant: ((((((((((((bob == 1 && !(\result == 0)) && handle == 1) && !(0 == \result)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || ((((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && !(0 == \result)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1537]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && client == 1) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || ((((((((client == 1 && 1 == queue_empty) && bob == 1) && ((((1 == msg && 1 == msg) && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) && queue_empty == tmp) && client == 1) && 1 == sender) && handle == 1) && \result == queue_empty) - InvariantResult [Line: 1537]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: ((((((handle == chuck___0 && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0) - InvariantResult [Line: 2159]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2159]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 2635]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1932]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1918]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2196]: Loop Invariant Derived loop invariant: (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && ((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && handle == 1) && 1 == msg) && handle == 1) && client == 1) && \result == queue_empty) || (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && !(0 == tmp)) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && __ste_client_privateKey0 == \result) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg))) && handle == 1) && client == 1) && \result == queue_empty) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && ((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && handle == 1) && 1 == msg) && handle == 1) && client == 1) && \result == queue_empty) || (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && !(0 == tmp)) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && __ste_client_privateKey0 == \result) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg))) && handle == 1) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 1 == queue_empty && __ste_email_isSigned0 == 0 - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: ((((((((((((((handle == chuck___0 && bob == 1) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && __ste_email_isSigned0 == 0) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 2035]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2196]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1738]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2404]: Loop Invariant Derived loop invariant: (((((((((((((((privkey == __ste_client_privateKey0 && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 2021]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: (1 == queue_empty && __ste_email_isSigned0 == 0) && \result == queue_empty - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2404]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((privkey == __ste_client_privateKey0 && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || (((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && 1 == sender) && (((1 == msg && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) && handle == 1) && \result == queue_empty) - InvariantResult [Line: 2010]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2178]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && client == 1) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || ((((((((client == 1 && 1 == queue_empty) && bob == 1) && ((((1 == msg && 1 == msg) && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) && queue_empty == tmp) && client == 1) && 1 == sender) && handle == 1) && \result == queue_empty) - InvariantResult [Line: 1910]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1996]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1851]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2812]: Loop Invariant Derived loop invariant: ((((((((((bob == 1 && !(\result == 0)) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && !(0 == tmp)) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && __ste_client_privateKey0 == \result) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg))) && handle == 1) && \result == 1) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) || ((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && handle == 1) && 1 == msg) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2178]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1841]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2812]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2700]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && handle == 2) && handle == rjh___0) && \result == queue_empty - InvariantResult [Line: 1728]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2626]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2700]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 2)) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2178]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) - InvariantResult [Line: 1749]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1909]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1442]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1388]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1227]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1388]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty - InvariantResult [Line: 1985]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && handle == 2) && !(handle == 1)) && handle == rjh___0) && \result == queue_empty - InvariantResult [Line: 2215]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) - InvariantResult [Line: 1971]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && ((((((1 == msg && 1 == msg) && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && handle == 1) && \result == 0) && 1 == msg) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) - InvariantResult [Line: 2644]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1957]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1705]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 2)) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 2644]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2594]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && \result == 0) && !(1 == chuck___0) - InvariantResult [Line: 1334]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 383 locations, 2 error locations. Result: SAFE, OverallTime: 16.0s, OverallIterations: 14, TraceHistogramMax: 2, AutomataDifference: 3.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 9.2s, HoareTripleCheckerStatistics: 9561 SDtfs, 16618 SDslu, 16106 SDs, 0 SdLazy, 612 SolverSat, 81 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.6s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 115 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 1.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=742occurred in iteration=11, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 14 MinimizatonAttempts, 2225 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 93 LocationsWithAnnotation, 93 PreInvPairs, 256 NumberOfFragments, 4528 HoareAnnotationTreeSize, 93 FomulaSimplifications, 98186 FormulaSimplificationTreeSizeReduction, 1.0s HoareSimplificationTime, 93 FomulaSimplificationsInter, 60927 FormulaSimplificationTreeSizeReductionInter, 8.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 741 NumberOfCodeBlocks, 741 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 727 ConstructedInterpolants, 0 QuantifiedInterpolants, 72341 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 14 InterpolantComputations, 14 PerfectInterpolantSequences, 14/14 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...